Site no longer appears in Logging and Reporting-->Webserver Protection-->Details tab after firmware upgrade.

Hi, Alberto, and welcome to the UTM Community!

Guys, it's difficult to tell if this is the graphs that are broken or the underlying databases.

It's been over three years since I had to use the following, so I'm not certain, but I believe that it fixes the graphs and does not erase any existing content.  As root at the command line:

rm /var/log/reporting/rrd/*
/etc/init.d/syslogng restart
/etc/init.d/rrdcache restart
/usr/local/bin/reporter/system-reporter.pl

If that didn't resolve the problem (my guess is that Jim should start here), the following command re-initializes the PostgreSQL databases, deleting all of the information currently used by the graphs:

/etc/init.d/postgresql92 rebuild

Of course, if you have a paid subscription, you should have Sophos Support look at your UTM and make the decision of which you need.  Let us know if that resolved your issue.

Cheers - Bob

Hi

thanks for the response.

I have a premium support, the license for the firewall is for 3 years and i bought it 6 month ago.

i Must write to the reseller?

Tnanks

Hi

thanks for the response.

I have a premium support, the license for the firewall is for 3 years and i bought it 6 month ago.

i Must write to the reseller?

Tnanks

Before you do that, try a trick just discovered by fellow member Louis-M.  In 'Logging & Reporting >> Reporting Settings', increase the amount of time Webserver Protection data is kept.  Did that resolve your problem?

Cheers - Bob

I have ours set to 3 months.  The problem is that there is no reporting on other sites at all after the firmware update.  I can pull data from before the firmware upgrade on our other sites, but nothing after.  For instance we had multiple sites that were showing in Logging and Reporting-->Webserver Protection.  Now only 1 site is populating any data there.  The WAF log shows data for all the sites, but the Logging and Reporting-->Webserver Protection does not.  It now only shows data for 1 of our sites.  This happened directly after the firmware upgrade.  Also as I mentioned the Log Partition Status page (Logging & Reporting) shows all 0s now.  This is also directly after the firmware upgrade.

HI,

I have the same problem  and with the last firmware 9.403-4 the situation is not changed.

Alberto

Jim, are you saying that the trick discovered by Louis-M didn't work for you?  Did you try the suggested PostgreSQL rebuild?

Cheers - Bob

BAlfson,

In a test environment, on a test Sophos UTM instance, I tried the all the commands that you had posted including the postgresql92 rebuild, but that did not fix the Log Partition Status page which is still showing all 0's.  Since it did not fix this page, I did not try the commands on our production instance.

Also, since my Logging & Reporting >> Reporting Settings was already set to 3 months, I did not change it - the data stopped appearing for most of our web sites after the firmware upgrade.  Are you saying that I should try to change it even though it is already set to 3 months?

Yes.  My read of the "trick" was to increase retention.

Cheers - Bob