Sandblast Agent, logs (cloud)

[vinceneil666]

Hi,

Can anyone help med out regarding the logs for SandBlast, how long are the logs kept ? And is there a way of increasing this time ? 

[PhoneBoy]

It depends on the number of endpoints, I believe.
In general, we do have SKUs to extend the amount of logs that can be stored (and kept) in Smart-1 Cloud, which I assume also apply on the Endpoint side.

[64Bit]

As @PhoneBoy said there are SKUs on managing logs on server side. The amount of logs gathered depends on what's being captured, how often these are created and the amount of storage available.

For Endpoint side please refer to SK172626 https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[PhoneBoy · Accepted solution]

Apparently each customer gets 40GB.
I believe you can set the actual retention policy using SmartConsole (yes, that's supported with EPMaaS).
If you need more space, please contact your Check Point SE.

[vinceneil666]

Thank you @PhoneBoy  , I have had a bit of struggle getting this info 🙂 , relating to the 40GB - is this described in a SK or somewhere else ? I will proceede to raise a ticket on getting some more GB's for one of my larger enviroments.

[64Bit]

@vinceneil666 You can view the total disk space available on the cloud endpoint security server in smart console

 

[PhoneBoy]

Not that I'm aware of, a few friends in TAC pointed me in the right direction. 
@Kobie_Bendalak maybe we should document this somewhere.