Logs

On a guest VM, the logs are written to the Windows Application event log. You can find the log in Applications and Services Logs > Sophos > SVE.

On a Security VM, you can collect the logs and retrieve them from the shared logs directory. To do this:

  1. Open a console to the Security VM.
  2. Log on:
    • Username is "sophos".
    • Password is the access password you set when you installed the Security VM.
  3. Enter the following command:

    sudo /opt/sophox/logcollector/diagnose

    Enter your access password when prompted. (This may take a minute to complete).

  4. In Windows Explorer, you can now access the collected logs in \\<SVM-IP-Address>\logs\logs.tgz. Enter your credentials when prompted:
    • Username is "sophos".
    • Password is the access password you set when you installed the Security VM.

For information about logging in Sophos Enterprise Console, see the Sophos Enterprise Console Help.