topic Re: SmartEvent policy install - log exporter cli configuration disappeared in Firewall and Security Management

SmartEvent policy install - log exporter cli configuration disappeared

AkosBakos — Mon, 13 Jan 2025 13:48:12 GMT

Hi All,

"Houston we have a problem"

Did somebody experience the following:

When I pushed policy in SmartEvent the cp_log_export configuration from CLI disappeared? The log export config in the SmartConsole remained, and when I install database to SmartEvent server, the config in the CLI appeared again.

The SmartEvent and the SMS server is on different VM.

Is it a known behaviour?

Akos

Re: SmartEvent policy install - log exporter cli configuration disappeared

the_rock — Mon, 13 Jan 2025 13:50:37 GMT

Will test it in my lab...what version/jumbo?

Andy

Re: SmartEvent policy install - log exporter cli configuration disappeared

AkosBakos — Mon, 13 Jan 2025 13:52:13 GMT

R81.20 take 76.

THX

Re: SmartEvent policy install - log exporter cli configuration disappeared

the_rock — Mon, 13 Jan 2025 14:01:58 GMT

Just tested jumbo 96, same issue, so thats valid question actually...is it expected?

Andy

Re: SmartEvent policy install - log exporter cli configuration disappeared

AkosBakos — Mon, 13 Jan 2025 14:02:25 GMT

Hi @the_rock

One more thing: the log_export is configured on the MGMT object itself.

Akos

Re: SmartEvent policy install - log exporter cli configuration disappeared

the_rock — Mon, 13 Jan 2025 14:03:33 GMT

Yes, thats right. I also have them as 2 separate machines, its dedicated SE server.

Andy

Re: SmartEvent policy install - log exporter cli configuration disappeared

Lesley — Mon, 13 Jan 2025 14:11:41 GMT

I have same issue I think:

[Expert@FWM0]# cp_log_export status
/opt/CPrt-R81.10/bin/cp_log_export: line 1: ï»¿#!/bin/bash: No such file or directory
Error: No log_exporter has been found for name: [all]

Was thinking about this bug, also related for the version you run:

PRJ-51694,
PRHF-31777

Logging

In some scenarios, after removing an existing Log Exporter instance, the creation of a new instance appears successful in SmartConsole. However, the new Log Exporter object is not actually generated.

At this moment waiting for maintenance window to update the system

Re: SmartEvent policy install - log exporter cli configuration disappeared

mated — Mon, 13 Jan 2025 14:22:23 GMT

Hi @Lesley ,

I have checked this and seems similar but not 100% same issue. You are getting the issue when creating the log_exporter, however it is for us with @AkosBakos every time succeeding.

I think the behaviour what @AkosBakos has is not expected.

Re: SmartEvent policy install - log exporter cli configuration disappeared

the_rock — Mon, 13 Jan 2025 14:50:23 GMT

Hey @mated

Its odd I see the same behavior as @AkosBakos in latest jumbo 96.

Andy

Re: SmartEvent policy install - log exporter cli configuration disappeared

Lesley — Mon, 13 Jan 2025 14:59:17 GMT

Installed take 172 and issue is still there. So this bug I posted before is indeed not related. This is odd, likes like something central has been changed. Any cases coming in regarding this? I can open one if it is helpful.

Re: SmartEvent policy install - log exporter cli configuration disappeared

the_rock — Mon, 13 Jan 2025 15:18:00 GMT

Very strange...I rebooted both mgmt and SE server, added log export config, installed SE policy, config was still there...

Andy

R81.20 jumbo 96

Re: SmartEvent policy install - log exporter cli configuration disappeared

AkosBakos — Mon, 13 Jan 2025 15:37:32 GMT

Thx Andy

Re: SmartEvent policy install - log exporter cli configuration disappeared

AkosBakos — Mon, 13 Jan 2025 18:15:18 GMT

Hi @Lesley

THX, we can open TAC ticket too, but I think we can live together with issue.

But it is strange 😉

Thanks for the community again, for the really quick and valuable answers.

Akos

Re: SmartEvent policy install - log exporter cli configuration disappeared

the_rock — Mon, 13 Jan 2025 16:19:16 GMT

If you need me to test anything else, let me know.

Andy

Re: SmartEvent policy install - log exporter cli configuration disappeared

jeldan — Tue, 14 Jan 2025 15:13:03 GMT

Hi, I'm trying to reproduce the issue with no success (Clean and also with Jumbo 76 and 96). Can you please list the steps of reproduction?

Thanks,
Daniel

Re: SmartEvent policy install - log exporter cli configuration disappeared

AkosBakos — Tue, 14 Jan 2025 15:14:44 GMT

Hi,

Did you set the log export through SmartConsole?

Re: SmartEvent policy install - log exporter cli configuration disappeared

jeldan — Tue, 14 Jan 2025 15:20:32 GMT

Yes, I have configured the log export through SmartConsole

Re: SmartEvent policy install - log exporter cli configuration disappeared

AkosBakos — Tue, 14 Jan 2025 15:26:33 GMT

SuperB. Now if you check the cp_log_export status you will see the config.

Then if you perfom a policy install in SmartEvent, the cp_log_export config disappears, until you perform a Database install to MGMT and SmartEvent server.

Unfortunately this is different VM, the roles are separated.

But according to Andy, this behaviour is the same in "sigle" environment where the 2 roles are on the same server.

Re: SmartEvent policy install - log exporter cli configuration disappeared

the_rock — Tue, 14 Jan 2025 15:30:22 GMT

I did test it again today and could NOT reproduce the issue. I configured via cli and smart console (log export), installed policy/database, then installed SE server policy, all good, nothing disappeared for log config at all.

Andy

Again, its R81.20, jumbo 96.

Re: SmartEvent policy install - log exporter cli configuration disappeared

Lesley — Tue, 14 Jan 2025 16:19:47 GMT

My issue is solved, removed both log exporters (I have 2 on 1 mgmt server). Install database, added them again and all good.