topic Re: SmartView: Accessing Check Point Logs from Web in Firewall and Security Management

SmartView: Accessing Check Point Logs from Web

PhoneBoy — Mon, 19 Jun 2017 20:29:51 GMT

SmartView was added to R80, but was not enabled by default.

In R80.10, it is enabled by default and can be reached by https://management-ip/smartview/

You log in using your SmartConsole credentials.

From here, you can view the logs and see reports without using SmartConsole.

Re: SmartView: Accessing Check Point Logs from Web

Tomer_Sole — Wed, 04 Jul 2018 20:08:15 GMT

With R80.20.M1 the web log viewer has more features and closes more gaps comparing to SmartLog.

Statistics pane
More data in the cards
Choose the column profiles
Right-click a log to filter the query
Exporting to Excel lets you select the columns
Auto-refresh views

I encourage you all to try out the web log viewer and tell us what you think.

(data is taken off Cloud Demo Mode so don't worry about it, it's not real)

Re: SmartView: Accessing Check Point Logs from Web

Matt_Cartlidge — Fri, 13 Jul 2018 14:43:56 GMT

I can login ok but don't see any logs, is there something else I need enable?

Re: SmartView: Accessing Check Point Logs from Web

PhoneBoy — Fri, 13 Jul 2018 15:56:59 GMT

Log indexing?

Re: SmartView: Accessing Check Point Logs from Web

Matt_Cartlidge — Mon, 16 Jul 2018 14:39:24 GMT

working now thanks!

Re: SmartView: Accessing Check Point Logs from Web

PhoneBoy — Mon, 16 Jul 2018 15:56:33 GMT

Did enabling Log Indexing sort it out?

Re: SmartView: Accessing Check Point Logs from Web

Matt_Cartlidge — Tue, 17 Jul 2018 08:07:03 GMT

Hi - yes it did thanks, It's really fast compared to running and searching logs on a VM (I'm on a mac).

Re: SmartView: Accessing Check Point Logs from Web

Daniel_Rojas — Wed, 18 Jul 2018 03:40:18 GMT

A great news.

Re: SmartView: Accessing Check Point Logs from Web

Tomer_Sole — Fri, 21 Jun 2019 08:56:03 GMT

R80.20 brings yet another change by letting you use the web-based log viewer as part of the SmartConsole application. See https://community.checkpoint.com/message/30701-how-to-switch-to-the-new-log-viewer-inside-smartconsole-and-maybe-get-a-little-performance-improvement

Re: SmartView: Accessing Check Point Logs from Web

Greg_Harbers — Thu, 01 Nov 2018 22:45:38 GMT

In an environment where you have separate log servers from Management, is this expected to work by going to the Management server or log server? I have found that it works on the logserver IP only, is this correct?

Re: SmartView: Accessing Check Point Logs from Web

PhoneBoy — Fri, 02 Nov 2018 14:00:54 GMT

Log server.

Re: SmartView: Accessing Check Point Logs from Web

Tim_Spencer — Thu, 15 Nov 2018 13:15:23 GMT

This Web version version is defintely speedy. But I am jealous of the examples above. We are running R80.10 and whilst the logs display and I can query them as expected, all the other panes ie. Top Ten, Timeline say Query failed. (They all work fine in actual SmartConsole.) Is this expected or should I be raising it with TAC as it looks fine in the above example

Re: SmartView: Accessing Check Point Logs from Web

PhoneBoy — Thu, 15 Nov 2018 13:49:19 GMT

As far as I know it should all work.

You should open a TAC case.

Note that SmartView has been improved pretty significantly in R80.20 as well.

Re: SmartView: Accessing Check Point Logs from Web

Tim_Spencer — Thu, 15 Nov 2018 14:17:19 GMT

OK will do, thanks

Re: SmartView: Accessing Check Point Logs from Web

Kfir_Dadosh — Thu, 15 Nov 2018 17:59:04 GMT

Top statistics, log-cards and profile editor are only integrated to R80.20.

That's why you didn't see them as you are running R80.10.

Re: SmartView: Accessing Check Point Logs from Web

Realeboga_Mashi — Thu, 27 Dec 2018 11:06:06 GMT

At least I can use some part of the CP admin console natively from my MAC - no need to RDP to a Windows machine.

Maybe one of the good days CP will enable access from a MAC just as we can do with Windows.

Re: SmartView: Accessing Check Point Logs from Web

smartview — Wed, 27 Mar 2019 13:59:44 GMT

Hi,

i am only able to login with default-admin to the webbased smartview. Every new added smartconsole-account dont work. I can connect to smartconsole but if i try webbased smartview i get "wrong username or password". User "sview" pass "qay123". If i take a wrong password - i get: authentican to server failed". The smartconsole-user has the super-user profile. Any ideas why this not work? I used a R80.20 take 101 with jumbo-ga 47. On our production system with R80.10 is works fine with every smartconsole-account.

Best Regards,
Christian

Re: SmartView: Accessing Check Point Logs from Web

smartview — Thu, 28 Mar 2019 08:59:52 GMT

Hi,

an here is the solution for the problem: Newly created users cannot log in to R80.20 SmartView WebUI -> sk148794. Hotfix is needed.

Symptoms

Starting from R80.20 Jumbo HFA Take 33, newly created users fail to log in into local SmartView WebUI, receiving the "Invalid username and password" error regarding the permission level set to the user.

Cause

New users are created with a new field that does not appear on SmartView.

Best Regards,

Christian

Re: SmartView: Accessing Check Point Logs from Web

JozkoMrkvicka — Sun, 31 Mar 2019 18:49:02 GMT

We are using dedicated R77.30 MDS log servers where some of the users doesn't have an account created (the local ones).
As far as I understand user management of R80.20 SmartView correctly, there is a need to have created local users in order to have access to the SmartView? In R77.30 MDS, you can simply open SmartView Tracker using SmartDashboard credentials and you are in.

If this is the case, is there a way to limit some users to access SmartView only for specific CMAs ?

Another question - Is there a way to display 24-hour format of time in SmartView? At the moment there is AM/PM format.

Re: SmartView: Accessing Check Point Logs from Web

JozkoMrkvicka — Sun, 31 Mar 2019 18:58:53 GMT

In R80.20 MDS environment, if I create a user which can access ONLY specific CMA (no MDS, nor Global), I can access via SmartConsole only this specific CMA.
In case I will access SmartView via browser and log in using this user, I can access also MDS and Global Domains. Not only that one which I have specified during user creation.