Sophos UTM Wrong Count Of SSH Logins In Summary In Executive Reports
If you get a wrong count of ssh logins in summary in executive reports :-
At some point an Accu file could get broken and all reporting data of the last 30 days gets lost.
Every 5 minutes the Reporter is updating the Accu file. If the file is not readable (because of being missing or corrupt) a new one is created and reporting starts from beginning.
The Accu files are binary and are located – /var/log/reporting/accu
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.