topic Re: Portal logfiles not rotated in Firewall and Security Management

Portal logfiles not rotated

Christian_Riede — Mon, 11 Feb 2019 12:23:15 GMT

According to sk102527, in versions R75, R76, R76SP, R76SP.10, R76SP.10_VSLS, R76SP.20, R76SP.30, R76SP.40, R77, R77.10, R77.20, R77.30 the portal http server logs are not rotated. This sk originally is from 2014.

Well, we have 2019 (Yes, that's 5 years!) and R80.10 T142 here and this is still not solved. Fixing that is a totally low hangig fruit. Not fixing is means manual effort to find and fix that in all checkpoint installations worldwide. Proactive is different..

Checkpoint does not seem to be able to solve their quality problems finally.

Re: Portal logfiles not rotated

G_W_Albrecht — Mon, 11 Feb 2019 12:54:05 GMT

According to sk102527, you can manually configure the Identity Awareness Gateway to rotate the Identity Awareness Captive Portal log files - and this is only needed when using IA Captive Portal.

I understand that manual changes are a pita and CP could have changed that already, but if all was perfect and no bugs anywhere, i fear i would not be able to make any money !

Re: Portal logfiles not rotated

Christian_Riede — Mon, 11 Feb 2019 13:01:01 GMT

Thanks, Adam, for taking this on your list for R80.30 GA.

Re: Portal logfiles not rotated

Christian_Riede — Tue, 12 Feb 2019 09:24:28 GMT

According to sk113619, /opt/CPNacPortal/logs/error_log_autoauth is also missing in the list of files that are not rotated and need to be added to logrotate.conf. This file would need to be added to sk102527.

Re: Portal logfiles not rotated

PhoneBoy — Wed, 13 Feb 2019 04:48:14 GMT

Make sure you leave feedback on the relevant SK so it gets addressed.

Re: Portal logfiles not rotated

Christian_Riede — Wed, 13 Feb 2019 15:14:51 GMT

of course, already done some days ago.

Re: Portal logfiles not rotated

Patrik_Rapposch — Tue, 10 Nov 2020 11:48:41 GMT

R80.30 T219 problem is still existent. 😒

If you see it too late, with this SK102527 and the usage of logrotate -f after the logrotate.conf update, you'd even force the system to write the disk 100% full ! happened at our site today!

the solution is then to throw away the existing log and then test with logrotate -f, if the config from SK102527 realy works.

[Expert@gatekeeper1-n1:0]# /usr/sbin/logrotate -f /etc/logrotate.conf
error: error writing to /opt/CPNacPortal/logs/access_log.1: No space left on device
error: error writing to /opt/CPNacPortal/logs/error_log.1: No such file or directory

deleting the existing log information helps out.

echo "0" /opt/CPNacPortal/logs/error_log
echo "0" /opt/CPNacPortal/logs/access_log

Check Point, really? Can't solve this simple issue in that huge amount of time and risking customers to fail with your product? 👌

Re: Portal logfiles not rotated

Royi_Priov — Wed, 11 Nov 2020 07:14:38 GMT

Hi @Patrik_Rapposch ,

Thanks for bringing this issue into my attention.

I agree that we (Check Point) should be proactive here and avoid such issue in the first place, although there is a solution in sk102527.

I have added this issue into our roadmap plan and hopefully we will find a better way for this matter.

Re: Portal logfiles not rotated

Patrik_Rapposch — Wed, 11 Nov 2020 08:07:11 GMT

Hi @Royi_Priov ,

great, thank you for responding and bringing this topic to your roadmap. Please note, that step 7 in SK102527 solution even could force the disk to become full, if you recognize it earlier then 100% disk usage, like we did.

If the disk is full, you anyway wouldn't be able to rotate logs, as the compressed logfile can't be written to a 100% full disk. In general I would recommend to move those logs to /var/log, which I expect is the real origin of this problem.

Thanks

Re: Portal logfiles not rotated

Patrik_Rapposch — Fri, 04 Jun 2021 07:21:06 GMT

6 months later, R80.30 Take 236, still not fixed.

Re: Portal logfiles not rotated

Licensing_Manag — Sun, 24 Oct 2021 15:57:57 GMT

Well its October 2021 & R80.40 and its still not fixed - let me guess Check Point says we need to upgrade to R81

Re: Portal logfiles not rotated

JanVC — Wed, 16 Nov 2022 07:05:45 GMT

2022 and still not fixed

in our instance, TAC admitted the sk102527 is even wrong

"After investigating this issue we saw that the problem is that the GW doesn't run the cronjob daily.
The fix for that is to manually create a cronjob to run this script using Gaia portal.

We will update the SK accordingly."

@Royi_Priov

Re: Portal logfiles not rotated

_Val_ — Thu, 17 Nov 2022 13:55:37 GMT

@JanVC Please send me the TAC SR number via private message, please.

Re: Portal logfiles not rotated

Jöran_Kaußel — Thu, 12 Oct 2023 09:45:52 GMT

this is still an issue in R81.10T110

I got rid of this by following sk113241 and adding portal logs to /etc/cpshell/log_rotation.conf. but it seems since we installed T95 in May this workaround is gone

Re: Portal logfiles not rotated

Jöran_Kaußel — Thu, 18 Apr 2024 11:25:03 GMT

addendum: seems to be fixed in R81.20