topic Sandblast Agent, logs (cloud) in Endpoint

Sandblast Agent, logs (cloud)

vinceneil666 — Fri, 19 Mar 2021 09:30:30 GMT

Hi,

Can anyone help med out regarding the logs for SandBlast, how long are the logs kept ? And is there a way of increasing this time ?

Re: Sandblast Agent, logs (cloud)

PhoneBoy — Sun, 21 Mar 2021 21:46:26 GMT

It depends on the number of endpoints, I believe.
In general, we do have SKUs to extend the amount of logs that can be stored (and kept) in Smart-1 Cloud, which I assume also apply on the Endpoint side.

Re: Sandblast Agent, logs (cloud)

64Bit — Mon, 29 Mar 2021 09:41:17 GMT

As @PhoneBoy said there are SKUs on managing logs on server side. The amount of logs gathered depends on what's being captured, how often these are created and the amount of storage available.

For Endpoint side please refer to SK172626 https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk172626

Re: Sandblast Agent, logs (cloud)

PhoneBoy — Wed, 31 Mar 2021 03:23:03 GMT

Apparently each customer gets 40GB.
I believe you can set the actual retention policy using SmartConsole (yes, that's supported with EPMaaS).
If you need more space, please contact your Check Point SE.

Re: Sandblast Agent, logs (cloud)

vinceneil666 — Wed, 31 Mar 2021 06:39:25 GMT

Thank you @PhoneBoy , I have had a bit of struggle getting this info 🙂 , relating to the 40GB - is this described in a SK or somewhere else ? I will proceede to raise a ticket on getting some more GB's for one of my larger enviroments.

Re: Sandblast Agent, logs (cloud)

64Bit — Wed, 31 Mar 2021 09:01:26 GMT

@vinceneil666 You can view the total disk space available on the cloud endpoint security server in smart console

Re: Sandblast Agent, logs (cloud)

PhoneBoy — Thu, 01 Apr 2021 01:02:45 GMT

Not that I'm aware of, a few friends in TAC pointed me in the right direction.
@Kobie_Bendalak maybe we should document this somewhere.