Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 17 replies
  • Subscribers 6 subscribers
  • Views 22006 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site no longer appears in Logging and Reporting-->Webserver Protection-->Details tab after firmware upgrade.

JBooks

One of our websites is no longer appearing in the Logging and Reporting-->Webserver Protection-->Details tab after upgrading the firmware to 9.401-11 from the previous version. I can see traffic to that site in both the Live Log and the WAF log, but not in the Logging and Reporting-->Webserver Protection-->Details tab anymore. How can I get this site to appear again in that section?



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Alberto, and welcome to the UTM Community!

    Guys, it's difficult to tell if this is the graphs that are broken or the underlying databases.

    It's been over three years since I had to use the following, so I'm not certain, but I believe that it fixes the graphs and does not erase any existing content.  As root at the command line:

    rm /var/log/reporting/rrd/*
    /etc/init.d/syslogng restart
    /etc/init.d/rrdcache restart
    /usr/local/bin/reporter/system-reporter.pl

    If that didn't resolve the problem (my guess is that Jim should start here), the following command re-initializes the PostgreSQL databases, deleting all of the information currently used by the graphs:

    /etc/init.d/postgresql92 rebuild

    Of course, if you have a paid subscription, you should have Sophos Support look at your UTM and make the decision of which you need.  Let us know if that resolved your issue.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi

    thanks for the response.

    I have a premium support, the license for the firewall is for 3 years and i bought it 6 month ago.

    i Must write to the reseller?

    Tnanks

  • 0 in reply to AlbertoSoresina

    Before you do that, try a trick just discovered by fellow member Louis-M.  In 'Logging & Reporting >> Reporting Settings', increase the amount of time Webserver Protection data is kept.  Did that resolve your problem?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    I have ours set to 3 months.  The problem is that there is no reporting on other sites at all after the firmware update.  I can pull data from before the firmware upgrade on our other sites, but nothing after.  For instance we had multiple sites that were showing in Logging and Reporting-->Webserver Protection.  Now only 1 site is populating any data there.  The WAF log shows data for all the sites, but the Logging and Reporting-->Webserver Protection does not.  It now only shows data for 1 of our sites.  This happened directly after the firmware upgrade.  Also as I mentioned the Log Partition Status page (Logging & Reporting) shows all 0s now.  This is also directly after the firmware upgrade.

  • 0 in reply to JBooks

    HI,

    I have the same problem  and with the last firmware 9.403-4 the situation is not changed.

    Alberto

Reply Children
No Data
Unfiltered HTML