topic Re: Origin column is empty, R81.20 JHF T84 in General Topics

Origin column is empty, R81.20 JHF T84

saitoh — Mon, 18 May 2026 13:13:38 GMT

Hi experts,

env: CP3600 R81.20 with JHF Take 84, standalone

I cannot conduct research on the issue because the appliance is not within my reach now.

Our customer reported some appliances I configured produced fw.log with Origin column empty.

It causes some trouble for them analyzing access log.

What can be the root cause for this behaviour?

Saitoh

Re: Origin column is empty, R81.20 JHF T84

Chris_Atkinson — Mon, 18 May 2026 13:33:47 GMT

What issue does it cause if it's truly a standalone deployment are logs being sent to a SIEM?

I'm hoping you aren't expecting different origins other than the local machine itself?

Re: Origin column is empty, R81.20 JHF T84

Martijn — Mon, 18 May 2026 13:46:19 GMT

Hi,

With limited information, it is difficult to tell what is going on.

What is the uptime of the appliances?
Did you tried to restart the Check Point services / reboot the appliance?
Did you perform a logswitch?

Take 84 is from september 2024 so I would advice to upgrade to the latest recommended take before investigating this issue.

Regards,
Martijn