https://community.checkpoint.com/t5/Firewall-and-Security-Management/Missed-quot-Connection-quot-Logs-data-in-Reports-View/m-p/185675#M34139 <P>When creating Reports/Views and doing some filtering we have noticed that when comes to Log Type "Connection" even though they are for sure visible in the Smart Console Logs, they are not reflected in the reports.&nbsp;</P><P>For the case in particular we noticed that when comes to filters logs&nbsp; (packet drops) by <EM>"first&nbsp;packet isn't syn"&nbsp;&nbsp;</EM>on an report we got not date found. We know for sure logs are there even though but for some reason cannot be retrieved to the reports/views.&nbsp;&nbsp;</P><P>We are aware that this also happens to the Log Type=Session, and this get solved by enabling on the firewall rules tracking "Per Session".&nbsp; Would it be possible that the same can be done for the&nbsp; Log type "Connection". All the logs we have for as&nbsp;<EM>first&nbsp;packet isn't syn"&nbsp;&nbsp;</EM>are "Connection" log type, which of course explain the lack of data in the reports/views.</P> Wed, 05 Jul 2023 13:48:37 GMT gironer 2023-07-05T13:48:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Missed-quot-Connection-quot-Logs-data-in-Reports-View/m-p/185675#M34139 <P>When creating Reports/Views and doing some filtering we have noticed that when comes to Log Type "Connection" even though they are for sure visible in the Smart Console Logs, they are not reflected in the reports.&nbsp;</P><P>For the case in particular we noticed that when comes to filters logs&nbsp; (packet drops) by <EM>"first&nbsp;packet isn't syn"&nbsp;&nbsp;</EM>on an report we got not date found. We know for sure logs are there even though but for some reason cannot be retrieved to the reports/views.&nbsp;&nbsp;</P><P>We are aware that this also happens to the Log Type=Session, and this get solved by enabling on the firewall rules tracking "Per Session".&nbsp; Would it be possible that the same can be done for the&nbsp; Log type "Connection". All the logs we have for as&nbsp;<EM>first&nbsp;packet isn't syn"&nbsp;&nbsp;</EM>are "Connection" log type, which of course explain the lack of data in the reports/views.</P> Wed, 05 Jul 2023 13:48:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Missed-quot-Connection-quot-Logs-data-in-Reports-View/m-p/185675#M34139 gironer 2023-07-05T13:48:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Missed-quot-Connection-quot-Logs-data-in-Reports-View/m-p/185687#M34143 <P>Explicit configuration is required to use Connection logs in SmartEvent reports as these are not indexed by default.<BR />See: <A href="https://support.checkpoint.com/results/sk/sk150452" target="_blank">https://support.checkpoint.com/results/sk/sk150452</A>&nbsp;<BR />Depending on the volume of logs involved, this can cause additional load.&nbsp;</P> Wed, 05 Jul 2023 15:17:54 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Missed-quot-Connection-quot-Logs-data-in-Reports-View/m-p/185687#M34143 PhoneBoy 2023-07-05T15:17:54Z