Firewall log service

GomesLucas — Sat, 04 Feb 2023 23:56:28 GMT

I would like to validate if I should reduce the parameter metrics:
Daily log retention configuration.
Apply the following log retention policy:
-Keep logs indexed for no more than;
-Keep log files for an extra.
Can it bring a considerable improvement to smartevent processing?

Re: Firewall log service

Tal_Paz-Fridman — Tue, 24 Jan 2023 14:24:11 GMT

Please refer to the relevant section in the administration guide (using the one from R81.20 as a starting point):

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_LoggingAndMonitoring_AdminGuide/Content/Topics-LMG/Understanding-Logging.htm#DailyLogsRetention

There is also sk117317 for Multi-Domain environments:

https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eventSubmit_doGoviewsolutiondetails=&solutionid=sk117317

And sk80720 SmartEvent Performance Tuning Guide:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk80720

topic Firewall log service in Firewall and Security Management

Firewall log service

Re: Firewall log service