topic Re: remove large NGAV log file in Endpoint

remove large NGAV log file

Kevin_T600 — Mon, 29 Jun 2020 18:01:17 GMT

What is the proper method for trying to remove a large (8gb) NGAV log file?

I can't seem to remove it with the product running, and there is no way to really disable it from the server itself that I know of. Even if I disable it from the server management server some of the blades still show online.

Thank you,

Re: remove large NGAV log file

Roman_Zitzev — Mon, 29 Jun 2020 18:27:43 GMT

hi,

it possible by remove self protection.

in %temp% there is a folder with GUID format

inside this folder there is a file called passdialog.exe

after running it, you will need to put your password for self protection and remove the log.

if you need any help you can contact me directly

romanzit@checkpoint.com

what client version you are using?

is it possible that you did any changes to the log level?

Re: remove large NGAV log file

Kevin_T600 — Mon, 29 Jun 2020 19:58:45 GMT

Roman,

using that utility worked to remove the log.

This was in client version 80.86, I know that issue was resolved in newer client versions, just need to get this system updated.

Thank you,

Re: remove large NGAV log file

Roman_Zitzev — Mon, 29 Jun 2020 20:07:48 GMT

ok let me know if my help needed.

Re: remove large NGAV log file

sean_incali — Wed, 06 Jul 2022 02:37:22 GMT

Hello, my ngav.log file is over 151 GB. Where is the %temp% folder located?

Re: remove large NGAV log file

Chris_Atkinson — Thu, 07 Jul 2022 00:16:40 GMT

Using the "quick access" navigation in Windows explorer to navigate to %temp% should land you somewhere like:

"C:\Users\<username>\AppData\Local\Temp\" after which you need to leverage the search function.

Re: remove large NGAV log file

sean_incali — Thu, 07 Jul 2022 00:32:33 GMT

I don't have that file in the temp folder or any of the subfolder in the temp folder.

I uninstalled and reinstalled it and that seems to have fixed the file size which stands now at 7.14MB. Not sure why it got so big.

If using the passdialog.exe is the only way to prevent it getting so big, then I guess I have to uninstall it and reinstall time to time. I wonder why I don't have that passdialog.exe file?

Re: remove large NGAV log file

Chris_Atkinson — Thu, 07 Jul 2022 09:56:21 GMT

The file is also available from TAC if needed.

The log shouldn't get big unless you are on an old client version, logging has been set higher via registry or there is a problem.

Re: remove large NGAV log file

sean_incali — Fri, 08 Jul 2022 01:15:12 GMT

Ok. How do I get the file? I reinstalled yesterday, and the NGAV.log was around 7 MB. It appears it has grown to about 20.9MB today. At that rate it would soon fill up the SSD again. I would rather have it stay a certain size and no larger. Can you attach the file to this thread with a step by step direction?

Re: remove large NGAV log file

Chris_Atkinson — Fri, 08 Jul 2022 05:56:27 GMT

Please contact Support (TAC) to request the file.

From memory it is also bundled with SmartConsole installation for admins.