topic Re: user admin activity log in Firewall and Security Management

user admin activity log

GuruHexa — Wed, 22 Nov 2023 15:15:55 GMT

Hello, I've been searching for a while and I haven't found the answer.
I'm looking for a way to see a user's activity through both the CLI and WebUI, where are these logs supposed to be?

Thank you very much for your help.

Re: user admin activity log

PhoneBoy — Thu, 23 Nov 2023 14:15:01 GMT

/var/log/messages should have any configuration change made via clish or the WebUI to
You will need to set up explicit logging for anything done in expert mode: https://support.checkpoint.com/results/sk/sk99134
Anything an admin does in SmartConsole should appear in the Audit Logs.

Re: user admin activity log

AfterMath — Tue, 26 Dec 2023 14:22:47 GMT

Hi @PhoneBoy @GuruHexa

Im running R.81.10, hotfix 110 and we cant see the admins activity log, what they are doing are not being showing on audit log tab.

Re: user admin activity log

the_rock — Tue, 26 Dec 2023 14:31:03 GMT

Try filter -> administrator:admin

Best,

Andy

Re: user admin activity log

AfterMath — Tue, 26 Dec 2023 14:34:24 GMT

@the_rock still not showing changes activity, only some admins log in/log out activity.

Re: user admin activity log

the_rock — Tue, 26 Dec 2023 14:39:02 GMT

Not sure then, sorry. Maybe support case next.

Best,

Andy

Re: user admin activity log

Agust — Fri, 19 Apr 2024 20:17:29 GMT

Hi guys.
We have a similar problem.
Were you able to solve it?
We could use your comments.
Thanks.