Recommendations

We recommend that the Log Writer is installed on the computer that has the management server installed. However, it can be installed on any server that has access to the Sophos Enterprise Console database.

By default, the Log Writer service will be installed under the LocalSystem account, which has full access privileges to the local server. We strongly recommend that you reassign the service to an account with lower access privileges after installation. However, the account must have the Write permission to the log output folder (by default, C:\Program Files\Sophos\Reporting Interface\Log Files).

If the service is installed to a computer other than the management server it will need to be run under a user account with the appropriate permissions to access the SEC database remotely. For this reason, the account should be mapped to a SQL login which has the SELECT and EXECUTE permissions granted within the Sophos LogWriter schema.

Note Make sure the Log Writer computer and the database computer have their computer's location, time zone, and clock set correctly based on their location.