Sophos UTM Wrong Count Of SSH Logins In Summary In Executive Reports

If you get a wrong count of ssh logins in summary in executive reports :-

At some point an Accu file could get broken and all reporting data of the last 30 days gets lost.

Every 5 minutes the Reporter is updating the Accu file. If the file is not readable (because of being missing or corrupt) a new one is created and reporting starts from beginning.

The Accu files are binary and are located – /var/log/reporting/accu

Duncan Newell

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: