topic Re: Identity Collector exclusion of Service Accounts and Management Server logs in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-exclusion-of-Service-Accounts-and-Management/m-p/97339#M10427 <P>That's fine by me! I was just wondering because I do not see any logs from other users who have been excluded from the Identity Collectors.</P> Wed, 23 Sep 2020 10:00:46 GMT kadar2 2020-09-23T10:00:46Z Identity Collector exclusion of Service Accounts and Management Server logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-exclusion-of-Service-Accounts-and-Management/m-p/97147#M10425 <P>Hello all,</P><P>I have added a service account to the exclusion filter in the identity collector. The service account is no longer seen when issuing the command "pdp idc service_accounts" on the relevant gateways.</P><P>I still see Log In/Log Out events for this account in the identity logging of the Management Servers. I was under the impression that no logs for this account should appear after the exclusion.</P><P>I am missing something or is this the correct behavior?</P><P>Thanks in advance,</P> Mon, 21 Sep 2020 07:32:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-exclusion-of-Service-Accounts-and-Management/m-p/97147#M10425 kadar2 2020-09-21T07:32:39Z Re: Identity Collector exclusion of Service Accounts and Management Server logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-exclusion-of-Service-Accounts-and-Management/m-p/97335#M10426 <P>The main thing that exclusions do is prevent the relevant accounts from turning into sessions in the pdp.<BR />Makes sense that you may still see logs from those users.</P> Wed, 23 Sep 2020 08:25:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-exclusion-of-Service-Accounts-and-Management/m-p/97335#M10426 PhoneBoy 2020-09-23T08:25:06Z Re: Identity Collector exclusion of Service Accounts and Management Server logs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-exclusion-of-Service-Accounts-and-Management/m-p/97339#M10427 <P>That's fine by me! I was just wondering because I do not see any logs from other users who have been excluded from the Identity Collectors.</P> Wed, 23 Sep 2020 10:00:46 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Collector-exclusion-of-Service-Accounts-and-Management/m-p/97339#M10427 kadar2 2020-09-23T10:00:46Z