topic Re: SmartView Logs Export in General Topics

SmartView Logs Export

MP — Tue, 20 Aug 2019 17:06:54 GMT

Hi, CheckMates,

I'm new to checkpoint (3weaks of management now), we migrated from TMGs.

We still have rules that we need to tune, I would like to export logs to excel day by day to be more easy to filter and study so I can see what new rules I need, and what rules I don't need.

But I'm struggling to get the logs to CSV, I trying vi https://MGMT_IP/SmartView to be able to export up to 1 million log entries.

This is what I am doing:

-Open SmartView

-Create the log range

-Export logs to CSV option

-And wait

And it stays like this forever:

The problem is I wait forever... I let the all weekend the job of export one day and on Monday it still not finish.

What is Iam doing wrong? Can you help me?

Thanks all in advance for the help.

King Regards

Re: SmartView Logs Export

PhoneBoy — Tue, 20 Aug 2019 20:15:41 GMT

What management appliance and software version?

Re: SmartView Logs Export

MP — Wed, 21 Aug 2019 09:28:35 GMT

Hi PhoneBoy,

Sorry, I forgot those details:

Management Appliance: Smart-1 205

Software Version: R80.20

Build:101

Kernel: 3.10.0-693cpx86_64

Thank you in advance!

Kind regards,

Re: SmartView Logs Export

PhoneBoy — Wed, 21 Aug 2019 16:39:03 GMT

What Jumbo Hotfix do you have installed, in any?
There is at least one potential bugfix that may be relevant.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592

Re: SmartView Logs Export

MP — Thu, 22 Aug 2019 09:52:29 GMT

Jumbo Hotfix is "Take 87", both in management and nodes.

I will investigate the one you sent me.

And I have a new one to install "Take 91".

Thank you!

Re: SmartView Logs Export

PhoneBoy — Thu, 22 Aug 2019 17:45:47 GMT

The bug I saw was added in Take 47 or thereabouts, so you're good there.
Probably worth a TAC case to investigate what's happening.

Re: SmartView Logs Export

MP — Fri, 23 Aug 2019 08:42:18 GMT

Hi PhoneBoy

Yeh, I search in all the information and saw that it was on take 47 to.

For now, I came up with the solution of export and analyze by rule, and as it doesn't have so many hits, it exports with no problem.

I will wait for my colleague came from vacations and will open a case.

Thank you a lot from all your help mate.

King regards.