topic Re: No logs in SmartConsole in Firewall and Security Management

No logs in SmartConsole

Bruy — Sat, 05 Nov 2022 13:09:04 GMT

Hello everyone. I built up a standalone machine R81.10 in VMware Workstation. And I don't have logs in SmartConsole. I think i need to do something with what is on picture, but i dont know how to enable all this functions.

Re: No logs in SmartConsole

Chris_Atkinson — Sun, 06 Nov 2022 22:20:07 GMT

How is the track column in the policy configured and what traffic flow isn't logging when it should?

Have you tried "installing database" from the menu or a reboot?

Re: No logs in SmartConsole

the_rock — Sun, 06 Nov 2022 14:51:08 GMT

Hm...I see whats wrong with that picture (snimak ekrana...I think that means screenshot from what I remember of my cyrilic alphabet lol). Anyway, see, with standalone config, there is no separate management server, so technically, it would be logging locally really.

Did this ever work? When did you notice the issue? Some basic things you could try, since its a lab is cpstop/cpstart, reboot, fw logswitch...

Re: No logs in SmartConsole

Bruy — Sun, 06 Nov 2022 15:16:14 GMT

Thank you for answer. There weren't any logs in smartconsole ever. I tried basics commands but they didn't help me. I have a logs in SmartView Tracker if it will help you

Re: No logs in SmartConsole

the_rock — Sun, 06 Nov 2022 15:29:38 GMT

Im free later if you want to do remote. Im in EST time zone.

Re: No logs in SmartConsole

Bruy — Mon, 07 Nov 2022 09:00:11 GMT

Yeah, why not. I leave in UTC+3 zone. Contact me ivanbruy04@gmail.com to discuss further

Re: No logs in SmartConsole

the_rock — Mon, 07 Nov 2022 11:44:09 GMT

Ok, emailed you directly.

Re: No logs in SmartConsole

the_rock — Mon, 07 Nov 2022 14:48:24 GMT

Update from remote session with Ivan:

we ran cpstat fw -f log_connection...shows logs are sent and we know that, since they are showing in smartview tracker, just NOT in dashboard

ran through sk

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk38848

verified masters file

also did below and rebooted:

Stop Check Point services:

[Expert@FW]# cpstop

Move all the accumulated FireWall log files to another directory:

[Expert@FW]# mkdir -p /var/log/temp_logs
[Expert@FW]# cd $FWDIR/log/
[Expert@FW]# mv *.log* /var/log/temp_logs/

Reboot:

[Expert@FW]# reboot

Check if FireWall log files were created again:

[Expert@FW]# ls -l $FWDIR/log/fw.log*

Check if logs are being sent to the Security Management Server.

Also, when box was rebooted, when we logged into dashboard, gave warning that /va/log needed at least 2 GB free space and it was 1.5 at the moment and there was only 1 file we could delete bigger than 100 MB

Unless someone else has different suggestion, I think this would need to be rebuilt and more space assigned to /var/log dir

Also, since lvm_manager cant run to resize directory unless in maintenance mode, not sure if there is an easy way to do this in vmware, but if there is a way and can be resized, Im pretty sure that would fix this issue without having to rebuild.

Re: No logs in SmartConsole

aeronl12 — Thu, 25 Jan 2024 10:21:57 GMT

Hi, Also, tried to create a Check Point Standalone VM for labbing and learning purposes, and notice the same behavior where the Local Logs are not showing in the Logs & Monitor Log View. See attached image.

Re: No logs in SmartConsole

Amir_Senn — Thu, 25 Jan 2024 12:13:42 GMT

Try to make sure/switch to Index mode. I see from the photo that you're opening a log file.

Re: No logs in SmartConsole

the_rock — Thu, 25 Jan 2024 12:21:19 GMT

Might be by default. I see same in all my las, but works fine.

Andy