R80.20 Management Not Resolving Some New Objects In SmartLog

Daniel_Taney — Fri, 15 Mar 2019 19:35:24 GMT

I've been noticing some strange behavior since moving my SMS to R80.20 where some objects will not resolve when using them as search criteria in the SmartLog query bar.

For example, if I just search for "src: SERVER1", I am able to execute the query and see data as normal.

Then, when I try to search for an object that was recently created (src: SERVER2), the server name doesn't pop up as a suggestion as I'm typing and when I execute the query, I just get "Problems have occurred during search". If I just search by the IP address of SERVER2 instead, I am able to see logs.

So far, I've tried running Install Database a few times, manually stopped / started Smartlog (smartlogstop; smartlogstart), and rebooted the whole server to no avail. Has anyone experienced this behavior? Is something maybe just messed up with the Indexing / caching of objects?

Thanks!

Edit: I added a space after src: in my example because it was converting colon S to an emoji 🙂

Re: R80.20 Management Not Resolving Some New Objects In SmartLog

PhoneBoy — Sun, 17 Mar 2019 02:36:46 GMT

That suggests an indexing issue and it might be worth engaging with the TAC.

topic Re: R80.20 Management Not Resolving Some New Objects In SmartLog in Firewall and Security Management

R80.20 Management Not Resolving Some New Objects In SmartLog

Re: R80.20 Management Not Resolving Some New Objects In SmartLog