- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hello all,
My name is Ido and I’m a software developer in Checkpoint R&D under the Management Products team.
I’m happy to announce that starting from today a new feature of Automatic Revisions Purge is available and can be used via API.
See full documentation and examples here: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20
I would like to emphasize that it is very important to use purge in order to clear unused data and by that maintain an optimized disk space and improve the general performance of the Management product.
We recommend you to configure automatic revisions purge to run once in a month and purge all the revisions which were not created at the last 10 days.
P.S in order to actually reduce the disk space one should open an SR to TAC for running the procedure.
Automatic purge is available in the below jumbo versions:
R80.20(#18), R80.30(#10), R80.40(#6)
And will be available in R81 soon.
If you have questions or feedbacks feel free to contact me privately.
Thanks,
Ido
only via API? Is it not configurable via SmartConsole?
Yes, for now it will be available only via API.
I see you can configure it with the SmartConsole command line and also from the GAIA cli - mgmt.
But I guess that it would be nice if it was in the Smartconsole too
not sure why I am getting this error
mgmt set automatic-purge enabled true keep-sessions-by-days true number-of-days-to-keep 30 scheduling.start-date "2020-10-29T12:00:00"
MGMT9000 code: "generic_err_missing_required_parameters"
message: "Missing parameter: [automatic purge is enabled but missing one of: time-units/check-interval/start-date]"
Hi,
Try and put quotes on "30"
You are missing interval and time-units.
Your command is to: keep revisions published in last 30 days, starting from 2020-10-29T12:00:00, but you need to config also the intervals of when the purge execution itself will be triggered. say you want the purge will be triggered every 3 weeks, your full command should look like this:
mgmt_cli set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "30" scheduling.check-interval "21" scheduling.time-units "days" scheduling.start-date "2020-10-29T12:00:00" --format json
Full examples and more can be found here:
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20
oh, cool. Thanks
I would really appreciate to find a GUI for this in console - this feature is far too important to be reserved for API nerds and CLI freaks exclusively 😉
Agree, absolutely
Hi,
not working for me with this command on a MDS R81.10 JHFA Take 45
[Expert@servername:0]# mdsenv MyDomain
[Expert@servername:0]# mgmt_cli -r true set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "5" scheduling.check-interval "1" scheduling.time-units "days" scheduling.start-date "2022-04-29T06:00:00"
code: "err_validation_failed"
message: "Operation is not allowed - can't create automatic purge from global or system domains!"
Executed command failed. Changes are discarded.
[Expert@servername:0]#
API Documentation does not tell how to handle this for "Global" Domain and other Domains.
I know that this feature was buggy in R80.40 - I had a ticket for that which confirmed these bugs - but not sure why this does not work on R81.10.
You'll probably need to use the domain parameter, as mgmt_cli does not read the mdsenv.
`mgmt_cli -r true domain "MyDomain" ...`
Thanky for reply. I already opened a ticket at my Diamond Engineer because it is not working. Looks like a bug or another error in our environment. Unfortunately since one week no progress.
Nevertheless. Thank you for your reply.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY