topic After update to R81.20 – logs are lost in General Topics

After update to R81.20 – logs are lost

SubZer0 — Wed, 04 Sep 2024 15:33:04 GMT

After update MGMT from R81.10 to R81.20 Jumbo Hotfix Take 79 I lost all my log. So I follow https://support.checkpoint.com/results/sk/sk111766 but logs show only for few days. (I want to index for 180 days)

Should I try something else or should I repeat procedure?

Re: After update to R81.20 – logs are lost

the_rock — Wed, 04 Sep 2024 15:49:51 GMT

Can you see them if you open old school smartview tracker?

Andy

Re: After update to R81.20 – logs are lost

PhoneBoy — Wed, 04 Sep 2024 17:44:27 GMT

Depending on how many logs you have, it can take some time to fully index the old logs.
If you're concerned it isn't working, I'd check with TAC: https://help.checkpoint.com

Re: After update to R81.20 – logs are lost

SubZer0 — Wed, 04 Sep 2024 17:52:30 GMT

Dealing with a large amount of logs, how can I check if it is still indexing?

Re: After update to R81.20 – logs are lost

Alex- — Wed, 04 Sep 2024 18:03:10 GMT

Check there on your management server: $INDEXERDIR/log/log_indexer.elg

Re: After update to R81.20 – logs are lost

the_rock — Thu, 05 Sep 2024 13:36:45 GMT

Hey @SubZer0

Make sure this option is enabled.

Andy

Re: After update to R81.20 – logs are lost

SubZer0 — Thu, 05 Sep 2024 19:12:13 GMT

Log Indexing is enbale. I can see log if I go to File - Open Log File. Thanks for help.

Re: After update to R81.20 – logs are lost

CheckPointerXL — Wed, 11 Sep 2024 15:44:43 GMT

try to force re-index https://support.checkpoint.com/results/sk/sk111766 or re-index single log files by fw logsrepair command