topic Re: Smartconsole showing only current days logs in Endpoint

Smartconsole showing only current days logs

jadhavvishal219 — Fri, 13 Jan 2023 05:32:54 GMT

Hi Mates, we are facing problem in Smartconsole as the logs are visible only for current day and not for All time even if we filter for "All time". The log file is needed to be select day wise. Please suggest what can be done to see logs for All time. Attacking below image

Re: Smartconsole showing only current days logs

Vincent_Bacher — Fri, 13 Jan 2023 07:33:39 GMT

Hi,

can you open older logfiles in theLog&Monitor window?

Is log indexing enabled at the management/logserver?

Cheers

Re: Smartconsole showing only current days logs

Chris_Atkinson — Fri, 13 Jan 2023 13:17:45 GMT

Was the machine recently upgraded or was there any other event that occured?

Re: Smartconsole showing only current days logs

the_rock — Fri, 13 Jan 2023 14:14:22 GMT

Chris actually brought up a good point about upgrading...if it was upgraded, its possible its indexing issue.

Re: Smartconsole showing only current days logs

jadhavvishal219 — Sat, 14 Jan 2023 04:42:23 GMT

Hello Sir, recently there was issue with Indexer on MGMT. So with the help of vendor the issue got resolved. But while doing this Log Indexing was disabled on Both SmartEvent and Mgmt. Also, we are able to open log files of previous dates.

So, do I need to enable log indexing on both (smartevent and mgmt)?

Re: Smartconsole showing only current days logs

jadhavvishal219 — Sat, 14 Jan 2023 04:50:58 GMT

There was a issue with Indexer services in Management. So with the help of vendor, the issue was resolved. But now there shows file in smartconsole filter space due to which only current days logs are visible.

Re: Smartconsole showing only current days logs

PhoneBoy — Sat, 14 Jan 2023 19:22:37 GMT

Yes, indexing has to be enabled to search across multiple days worth of logs.

Re: Smartconsole showing only current days logs

jadhavvishal219 — Mon, 16 Jan 2023 11:53:31 GMT

Hi Sir, I have enabled the Log indexing on management Server but whenever I enable the same the Indexer process gets terminated again. And if I disables the Log indexing the Indexer services gets start again.

Please suggest.

Re: Smartconsole showing only current days logs

PhoneBoy — Mon, 16 Jan 2023 22:23:02 GMT

The only reason I can think of that log indexing would get disabled is you have not allocated enough RAM to your management server.
Please ensure it is a minimum of 8GB (more is recommended).
Otherwise, I suggest a TAC case.