<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Locally managed Quantum Edge - local logs path update in Spark Firewall (SMB)</title>
    <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199158#M9852</link>
    <description>&lt;H2 class="message-subject"&gt;&lt;SPAN class="lia-message-unread lia-message-unread-windows"&gt;Quantum Edge&lt;/SPAN&gt; is EOL and will not be updated from R80.20.x - so this is nice, but not very important &lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;/H2&gt;</description>
    <pubDate>Tue, 28 Nov 2023 13:44:04 GMT</pubDate>
    <dc:creator>G_W_Albrecht</dc:creator>
    <dc:date>2023-11-28T13:44:04Z</dc:date>
    <item>
      <title>Locally managed Quantum Edge - local logs path update</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199061#M9837</link>
      <description>&lt;P&gt;I played little bit in lab with Quantum Edge. Maybe this could be useful for someone.&lt;/P&gt;&lt;P&gt;&lt;FONT color="#FF0000"&gt;NOTE: I PREPARE THIS SOLUTION FOR TEST PURPOSES ONLY. IT IS NOT SUPPORTED BY VENDOR!&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Motivation:&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;Compare to SPARK appliances, Quantum Edge has no possibility to mount external SD card to store logs. At least I did not found any hint how to emulate this. I am testing things on locally managed edge often and when I reboot it, previous logs disappear and also log queue in default location is too short. I would like to prevent this and make logs to survive reboot plus I would like to use for it space from "/logs" folder in file-system (every additional space above required one during installation is attached here).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Solution:&lt;/STRONG&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Create some new folder in /logs (for example &lt;STRONG&gt;/logs/custom_log_loc&lt;/STRONG&gt;)&lt;/LI&gt;&lt;LI&gt;Create simple bash script for replace of symbolic link related to logs (this is optional, you can do it directly in crontab in next step as well). Remember to add script file executable rights.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="javascript"&gt;#! /bin/sh
rm /opt/fw1/log
ln -s /logs/custom_log_loc/ /opt/fw1/log&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Edit &lt;STRONG&gt;crontab -e&amp;nbsp;&lt;/STRONG&gt;and put following line to add script there. This will replace symlink after each device boot.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="javascript"&gt;@reboot /&amp;lt;script_location&amp;gt;/your_script.sh &lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;For first time you need to reboot the device to make solution operational.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Now you have possibly bigger storage space for logs on locally managed Edge device and it survive reboot. Keep on mind that could be there issues with clearing the space in new location and you need to handle it.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 27 Nov 2023 19:49:07 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199061#M9837</guid>
      <dc:creator>Petr_Hantak</dc:creator>
      <dc:date>2023-11-27T19:49:07Z</dc:date>
    </item>
    <item>
      <title>Re: Locally managed Quantum Edge - local logs path update</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199158#M9852</link>
      <description>&lt;H2 class="message-subject"&gt;&lt;SPAN class="lia-message-unread lia-message-unread-windows"&gt;Quantum Edge&lt;/SPAN&gt; is EOL and will not be updated from R80.20.x - so this is nice, but not very important &lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;/H2&gt;</description>
      <pubDate>Tue, 28 Nov 2023 13:44:04 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199158#M9852</guid>
      <dc:creator>G_W_Albrecht</dc:creator>
      <dc:date>2023-11-28T13:44:04Z</dc:date>
    </item>
    <item>
      <title>Re: Locally managed Quantum Edge - local logs path update</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199195#M9856</link>
      <description>&lt;P&gt;I agree with you. I play with it because the product is still live for some customers, so I just share results to world&amp;nbsp;&lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 28 Nov 2023 20:06:54 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199195#M9856</guid>
      <dc:creator>Petr_Hantak</dc:creator>
      <dc:date>2023-11-28T20:06:54Z</dc:date>
    </item>
    <item>
      <title>Re: Locally managed Quantum Edge - local logs path update</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199246#M9859</link>
      <description>&lt;P&gt;Official CP support of R80.20.x ends March 2024, so if it is still live for some customers, they should work on replacing it - and you can also send the logs to an external syslog server...&lt;/P&gt;</description>
      <pubDate>Wed, 29 Nov 2023 10:17:12 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/Locally-managed-Quantum-Edge-local-logs-path-update/m-p/199246#M9859</guid>
      <dc:creator>G_W_Albrecht</dc:creator>
      <dc:date>2023-11-29T10:17:12Z</dc:date>
    </item>
  </channel>
</rss>

