topic fwlog and log in Firewall and Security Management

fwlog and log

handiansudianto — Tue, 31 Oct 2023 02:39:41 GMT

When i activate smart event now on the log and monitor there are fw.log and log, what difference between both logs?

Re: fwlog and log

the_rock — Tue, 31 Oct 2023 02:57:24 GMT

fw.log is the current log file. The way it has been with CP for the longest time is that by default, fw.log switches every night at midnight or when it reaches 2 GB size, whichever one comes first. Files that end with log are the ones already switched over and they would most likely have the corresponding date in their names.

Andy

Re: fwlog and log

handiansudianto — Tue, 31 Oct 2023 03:05:05 GMT

both logs shown similar logs, but on the log there are many action 'Detect'

Re: fwlog and log

PhoneBoy — Tue, 31 Oct 2023 22:48:07 GMT

In your first picture, you can see that it's only pulling from fw.log (the current file).
In the second, it is showing logs from the last 24 hours (again, as your query states).

You would have to click on the log entry and see the full card to understand why traffic is being Detected.
However, it is most likely your Threat Prevention configuration.