Logs

You can view logs on a guest VM.

On a guest VM, the logs are written to the Windows Application event log. You can find the log in Applications and Services Logs > Sophos > SVE.

On a Security VM, you can collect the logs and retrieve them from the shared logs directory. To do this:

  1. Open a console to the Security VM.
  2. Log on:
    • Username is "sophos".
    • Password is the access password you set when you installed the Security VM.
  3. Enter the following command: sudo /opt/sophox/logcollector/diagnose.
  4. Enter your access password when prompted. (This may take a minute to complete).
  5. In Windows Explorer, you can now access the collected logs in \\<SVM-IP-Address>\logs\logs.tgz. Enter your credentials when prompted.
    • Username is "sophos".
    • Password is the access password you set when you installed the Security VM.

For information about logging in Sophos Enterprise Console, see the Sophos Enterprise Console help.