topic Re: Now Showing latest logs on checkpoint management server. in General Topics

Now Showing latest logs on checkpoint management server.

Pradeep_Salunke — Tue, 02 May 2023 15:08:44 GMT

I have checked the logs on checkpoint smart console, it is not showing latest logs.

Checked the ping and connectivity to management server, It seems to be fine.

Nestat connection showing established.

Storage also showing normal.

Process also showing esblished.

Can any help to solve this issue?

Re: Now Showing latest logs on checkpoint management server.

Matt_Ricketts — Tue, 02 May 2023 15:30:05 GMT

On your gateway(s), when you run the following command, does it show that the logs are defined and connected to your logging server?

cpstat fw -f log_connection

Re: Now Showing latest logs on checkpoint management server.

Pradeep_Salunke — Tue, 02 May 2023 15:39:03 GMT

Overall Status: 0
Overall Status Description: Security Gateway is reporting logs as defined
Local Logging Mode Description: Logs are written to log server
Local Logging Mode Status: 0
Local Logging Sending Rate: 0
Log Handling Rate: 1538

Log Servers Connections
-------------------------------------------------------
|IP |Status|Status Description |Sending Rate|
-------------------------------------------------------
|10.15.254.20| 0|Log-Server Connected| 1540|
-------------------------------------------------------

Re: Now Showing latest logs on checkpoint management server.

the_rock — Tue, 02 May 2023 15:40:42 GMT

https://support.checkpoint.com/results/sk/sk38848

https://support.checkpoint.com/results/sk/sk40090

If all steps fail, there is another trick thats been around for 20 years, used to make this work. You create new CP host as per below and you ONLY enable logging, give same IP as mgmt server and then add it under log settings on gateway/cluster object, push policy and test. If that works, delete object and put back original mgmt as log server.

Andy