R80.30 - Exporting Rule Hit Counters without SMS access?

Shurik — Tue, 28 Jul 2026 19:46:45 GMT

Hey all,

Looking for a way to export rule hit counts on a large policy in R80.30 for an cleanup/upgrade project.

My access:

SmartConsole: Access to view the policy (I can see the Hits column in the GUI).
Gateway: Full SSH / Expert access.
Management Server: No SSH or Management API access.

What I've tested:

Actions > Export in SmartConsole leaves out the Hits column entirely.
Copy/pasting grid rows into Excel doesn't work.
Gateway CLI commands (cpstat fw, fw tab) show active connection stats, but no clean rule-by-rule tally.

Has anyone found a clean workaround or gateway script to pull rule hit numbers under these access constraints?

Thanks!

Re: R80.30 - Exporting Rule Hit Counters without SMS access?

PhoneBoy — Tue, 28 Jul 2026 20:12:12 GMT

Hits weren't exported from SmartConsole until a much later release.
If you have API access, hits can be included as part of a show access-rulebase call (they aren't by default), even in R80.30.

The hitcount data is actually stored in a sqlite file on the gateway: $FWDIR/conf/hit_count_rules_table.sqlite
This is per: https://support.checkpoint.com/results/sk/sk79240

topic R80.30 - Exporting Rule Hit Counters without SMS access? in General Topics

R80.30 - Exporting Rule Hit Counters without SMS access?

Re: R80.30 - Exporting Rule Hit Counters without SMS access?