This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

All Logging Stopped

I'm running UTM 9.315-2. Installed it a month ago (approx.). Logging was working. Now no logging is occurring. No log files are being created and live log shows nothing. 

For example, I was using the Firewall live log to debug firewall issues but now see nothing when the window launches.

Le t me emphasis that there is NO logging occurring at all.

What steps do I need to do to recover UTM's ability to log data. [:O]


This thread was automatically locked due to age.
  • Hi and welcome!

    What's the underlying hardware?

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • Logging failure is not something I would take lightly.

    Is syslogng running?

    # /etc/init.d/syslogng status


    # ps ax | grep syslog


    The sizes of the archived log files may indicate when logging stopped:
    # ls -l /var/log/system/2015/0[89]


    Restart syslogng:
    # /etc/init.d/syslogng restart


    Has the non-logging persisted across UTM reboot(s)?
  • Running Gigabyte Mini-itx with 8GBytes RAM, 250GB SSD and Quad core i7 (3.2Ghz). I just had it lying around and so decided to use it. It's way overkill for this but it was free.
  • Rebooting does nothing...when I execute /etc/init.d/syslogng restart (using root) it fails.

    I saw something about reinitializing the data base because it might get corrupted? DO you know how to do that?
  • WebAdmin>Logging and Reporting>Local Logging>Local Logging is not turned off?

    What did you see abut re-initializing the database because it might get corrupted?
  • I saw something about reinitializing the data base because it might get corrupted? DO you know how to do that?


    I don't think that logging should be influenced because of database corruption.