topic Re: Peculiar issue when setting logging level R80.30 Api in API / CLI Discussion

Peculiar issue when setting logging level R80.30 Api

elaymorozov — Thu, 27 Feb 2020 13:44:44 GMT

So last week I finally had a chance to put some of api magic to good use .

Our environment runs multiple R80.10 gateway clusters with R80.30 management server (NOT mds ) .

Following recent to and fro with auditors we decided to tweak few things , re-group a lot of hosts and adjust how we log things .

Rule shifting , group management , adding and removing bunch of hosts , editing colors etc. Sounds like ideal case for API to be used .

Yours truly gleefully opened Smart console cli and went to api the **bleep** out of it (thank you Mark Watney).

It went smoothly and was genuine fun right until the logging bit .

Either I am missing something , or not getting the method but it seems like there is no api means to adjust the logging level on specific rule .

Create rule - check

enable track (log) - check

But whatever I could think of setting LOG to cover connection and session nothing seems to do it .

I wonder if there is a way to capture specific command issued by GUI version of Smartconsole to replicate in API .

Thoughts and suggestions welcomed.

Re: Peculiar issue when setting logging level R80.30 Api

PhoneBoy — Thu, 27 Feb 2020 14:44:15 GMT

The parameter for add-rule is called Track.
Discussed here: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Web-API-setting-track-level/m-p/65090#M4026

Re: Peculiar issue when setting logging level R80.30 Api

elaymorozov — Thu, 27 Feb 2020 16:03:43 GMT

Good afternoon , PhoneBoy .

Thank you for providing the link , so promptly .

Not precisely what I was after , but this definitely led me to the correct answers .

I think I agree with Vlad Tone the formal guide could use a bit of editing in my case I was after SmartConsole GUI

command structure and this can be somewhat difficult to follow

For the benefit of everyone who needs to mass tweak logging , or other parameters here is the final gist:

set access-rule uid <~~long uid jibrish~~ > layer "name of your security layer" track.accounting true

It may be knowledge gap on my part , however the exact way to apply these sub settings did not come to me from the manuals at all .Not until I ve reviewed some of the guys to and fro and realised command structures between various terminals differ .

Thanks again

Re: Peculiar issue when setting logging level R80.30 Api

PhoneBoy — Thu, 27 Feb 2020 16:29:20 GMT

There shouldn't be too many differences between using mgmt_cli and the CLI in SmartConsole.
That said, the SmartConsole CLI is less ideal if a bunch of changes need to be made at once.