Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 17 replies
  • Subscribers 6 subscribers
  • Views 22021 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site no longer appears in Logging and Reporting-->Webserver Protection-->Details tab after firmware upgrade.

JBooks

One of our websites is no longer appearing in the Logging and Reporting-->Webserver Protection-->Details tab after upgrading the firmware to 9.401-11 from the previous version. I can see traffic to that site in both the Live Log and the WAF log, but not in the Logging and Reporting-->Webserver Protection-->Details tab anymore. How can I get this site to appear again in that section?



This thread was automatically locked due to age.
  • 0

    The WebServer Protection-->Details tab was fixed with the 9.405-5 firmware upgrade; however, the Log Partition Status page is still not working, and is still showing all 0's.

  • 0 in reply to JBooks

    Yes.  My read of the "trick" was to increase retention.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to AlbertoSoresina

    i couldnt agree more..

    Seriously there needs to be some quality control before releasing updates!  Sophos please check your updates thoroughly! anyone have a fix for this?

  • 0

    hi everyone,

    i'm waiting for a response by sophos support ticket, it's a big mistake this "phantom data problem".

    It's over 1 month, sophos support very poor for me.....

  • 0 in reply to BAlfson

    BAlfson,

    In a test environment, on a test Sophos UTM instance, I tried the all the commands that you had posted including the postgresql92 rebuild, but that did not fix the Log Partition Status page which is still showing all 0's.  Since it did not fix this page, I did not try the commands on our production instance.

    Also, since my Logging & Reporting >> Reporting Settings was already set to 3 months, I did not change it - the data stopped appearing for most of our web sites after the firmware upgrade.  Are you saying that I should try to change it even though it is already set to 3 months?

  • 0 in reply to JBooks

    Jim, are you saying that the trick discovered by Louis-M didn't work for you?  Did you try the suggested PostgreSQL rebuild?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0

    Has anyone been able to figure any of this out or have received word from Sophos as how to fix it?  Either of these things?

  • 0

    same here:

    in "Logging & Reporting / Webserver Protection / Details / top virtual Hosts" only 1 Domain of 10 configured is listed for today or last 7 days

    for March and April all things are ok in reporting - seems it starts in May

    on usage Graphs: definitively not all requests reported - there is a average of 30 requests for today - there shoudt be some thousends

    anyone opened a call to sophos?

  • 0 in reply to JBooks

    HI,

    I have the same problem  and with the last firmware 9.403-4 the situation is not changed.

    Alberto

  • 0 in reply to BAlfson

    I have ours set to 3 months.  The problem is that there is no reporting on other sites at all after the firmware update.  I can pull data from before the firmware upgrade on our other sites, but nothing after.  For instance we had multiple sites that were showing in Logging and Reporting-->Webserver Protection.  Now only 1 site is populating any data there.  The WAF log shows data for all the sites, but the Logging and Reporting-->Webserver Protection does not.  It now only shows data for 1 of our sites.  This happened directly after the firmware upgrade.  Also as I mentioned the Log Partition Status page (Logging & Reporting) shows all 0s now.  This is also directly after the firmware upgrade.

Unfiltered HTML