topic Re: Management log conversion in Firewall and Security Management

Management log conversion

Sajenthiran_Mic — Wed, 30 Mar 2022 11:23:57 GMT

We a currently facing following error message on the Management Server R80.40 using following checkpoint comand:

fwm logexport -n -p -i <Log File Name> -o <Output>

sk39573 How to read a Check Point log file in its native format

error message:

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4588

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4589

…..

Re: Management log conversion

Timothy_Hall — Wed, 30 Mar 2022 16:39:13 GMT

Run a fw repairlog <Log File Name> command and try again. If that doesn't work see here: sk176644: The fwm logexport command does not work after an upgrade

Re: Management log conversion

Sajenthiran_Mic — Thu, 31 Mar 2022 14:40:19 GMT

I tried to use the command:

fw repairlog <Log File Name>

it did not help.

output looked still the same with R80.40 Jumbo hotfix 156

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4588

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4589

Re: Management log conversion

Timothy_Hall — Fri, 01 Apr 2022 13:41:21 GMT

Looks like your fwm logexport command is unable to decode/locate a field/column in certain log file entries; probably going to need a TAC case to figure out what is happening here.

Re: Management log conversion

Sajenthiran_Mic — Tue, 05 Apr 2022 15:17:20 GMT

Well i notice that the latest hotfix released was fixing the issue (JH Take 156).