https://community.checkpoint.com/t5/Scripts/CKP-BASH-AUDIT-LOGS-Based-on-sk99134-Audit-Logs/m-p/92108#M730 <P>This tool is to&nbsp;<SPAN>add logging for Bash shell commands in Gaia&nbsp;- well Check point has a detailed SK about it.&nbsp;</SPAN></P> <P><SPAN>Updated with a script that makes the required changes when ran from the SMS Smart Dashboard Script Repository.&nbsp;</SPAN></P> <P><SPAN>Added second script that can also set an external syslog server if needed.</SPAN></P> <P><SPAN>Added Readme file with instructions.&nbsp;</SPAN></P> <P>&nbsp;</P> <P><SPAN>Script location:&nbsp;</SPAN><SPAN><A href="https://github.com/inscez/ckp-audit-bash" target="_blank" rel="noopener">https://github.com/inscez/ckp-audit-bash</A></SPAN></P> <P><SPAN>Updated Archive also.&nbsp;</SPAN></P> <P>&nbsp;</P> Mon, 09 Feb 2026 11:02:44 GMT cezar_varlan1 2026-02-09T11:02:44Z https://community.checkpoint.com/t5/Scripts/CKP-BASH-AUDIT-LOGS-Based-on-sk99134-Audit-Logs/m-p/92108#M730 19 Mon, 09 Feb 2026 11:02:44 GMT https://community.checkpoint.com/t5/Scripts/CKP-BASH-AUDIT-LOGS-Based-on-sk99134-Audit-Logs/m-p/92108#M730 cezar_varlan1 2026-02-09T11:02:44Z https://community.checkpoint.com/t5/Scripts/CKP-BASH-AUDIT-LOGS-Based-on-sk99134-Audit-Logs/m-p/92112#M731 <P>The longer-term goal here is to move away from expert mode, bringing the needed functionality into clish natively or through some sort of extension (e.g. custom commands).<BR />This is also not a requirement for a large number of customers, though the customers that need it are...often large.</P> Tue, 21 Jul 2020 22:29:39 GMT https://community.checkpoint.com/t5/Scripts/CKP-BASH-AUDIT-LOGS-Based-on-sk99134-Audit-Logs/m-p/92112#M731 PhoneBoy 2020-07-21T22:29:39Z https://community.checkpoint.com/t5/Scripts/CKP-BASH-AUDIT-LOGS-Based-on-sk99134-Audit-Logs/m-p/92136#M732 <P>Thought that adding a Script repository meant just the opposite.</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="script repo.PNG" style="width: 920px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/7343i2BC6DD521B52FEA1/image-size/large?v=v2&amp;px=999" role="button" title="script repo.PNG" alt="script repo.PNG" /></span></P><P>&nbsp;</P><P>Also consider configuring Syslog server on the Gateways according to&nbsp;sk102995</P><P>clish -c "add syslog log-remote-address &lt;SYSLOG_IP&gt; level info"</P><P>clish -c "set syslog auditlog permanent"<BR />clish -c "save config"<BR />clish -c "show syslog all"</P> Thu, 23 Jul 2020 09:57:15 GMT https://community.checkpoint.com/t5/Scripts/CKP-BASH-AUDIT-LOGS-Based-on-sk99134-Audit-Logs/m-p/92136#M732 cezar_varlan1 2020-07-23T09:57:15Z