Sophos

Online support

Product maintenance

Contact support

Support services

Sophos Endpoint Security and Control: how to view log files

This article describes how to view some of the log files found in current versions of Sophos Endpoint Security and Control:

Note: You should log in as administrator to ensure you can view these files.

What to do

AutoUpdate log

To view the Sophos AutoUpdate log file:

  1. Right-click the Sophos shield in the system tray (the bottom right-hand corner of the screen).
  2. Select 'Configure...'.
  3. Select the Logging tab.
  4. Click 'View log File'.

Look in the 'Message' column for any error messages, these all start with the word 'ERROR'. New entries are appended to the top of the file.

View image

EM Library log files

To check for error messages in EM Library log files:

  1. Open the EM Library console, and in the tree, click 'Message Log'.
  2. The log file displayed shows EM Library logging information. This log file has four columns, 'Severity', 'Time', 'Description', and 'Category'.
  3. The most recent events are shown at the top. Alongside each entry is a symbol which indicates whether it is an 'Error', a 'Warning', or 'Information'.

The information that you see is actually held in the Windows Event Log. However EM Library allows you to view it directly from the console, as described here.

Remote Management System log files

Errors that involve connectivity or timeout problems can originate with the Remote Management System (RMS). These logs can be found in several locations. Check them for error messages.

If you need more information or guidance, then please contact technical support.