topic Re: Missing fwk.elg in Hyperscale Firewall (Maestro)

Missing fwk.elg

Ok1 — Thu, 05 Jun 2025 09:14:31 GMT

Hi mates!

During the investigation of the problem, it was found that fwk.elg is missing on two SG nodes in the Maestro environment. Has anyone encountered such a problem?

To display and search for fwk, I used the following commands:

# find / -name "fwk"
# cpwd_admin list

Re: Missing fwk.elg

kamilazat — Fri, 06 Jun 2025 10:41:13 GMT

This is interesting. I checked on my lab by both enabling/disabling user mode, and fwk.elg exists and gets written on both cases.

Are there any fwk core dumps?

Re: Missing fwk.elg

Tal_Paz-Fridman — Fri, 06 Jun 2025 11:38:51 GMT

Check specifically if exists in $FWDIR log in the context of the Virtual System:

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ScalablePlatforms_AdminGuide/Content/Topics-SPG/Maestro/Log-and-Configuration-Files.htm

If it does not exist try creating the file manually and seeing if data is written to it.

Re: Missing fwk.elg

the_rock — Fri, 06 Jun 2025 16:50:18 GMT

Weird...I just checked my lab, shows fine.

Andy

/var/log/opt/CPsuite-R82/fw1/log/fwk.elg

Re: Missing fwk.elg

Lesley — Fri, 06 Jun 2025 17:39:44 GMT

Maybe try to restart the member that has the missing file?

After that create hcp -r all health check report to find anything that could be wrong.

And what if you create a file on your own with vi? Or copy the fwk.elg from a working gw and put it on the problem unit and see if it is filled up then.