New Logs & Events Design in R82.20

[Don_Paterson]

SmartView comes to the SmartConsole, bringing log export to CSV with it.

Looking good. Although no firewall logs in Demo mode today. I have seen it in the lab and it does look good.

Question:

Will we see any changes in SmartEvent?

The legacy SmartEvent GUI is still there and I am also wondering about the other parts of SmartEvent (reports) and if there is any changes planned for the future?

No suggestions. Just curious.

[Tomer_Noy]

Thanks for sharing the feedback and the question @Don_Paterson!

We actually had an issue with R82.20 SmartConsole Demo Mode in which the logs were not generated properly. We fixed it, so new Demo Mode instances now include many logs (including Firewall) in the logs view.

Regarding other SmartEvent features => Yes!
These were definitely improved in the new SmartView as well. They are faster, look better and have a few new capabilities.

You can check these out in Demo Mode as well now (and some screenshots below).

BTW, a cool new feature is AI natural language search within SmartView, if you have the AI Assist feature activated on your management.
More new features and capabilities will be coming up for SmartView as we continue the investment there.

[Don_Paterson]

Thanks Tomer. That looks great!

[Vincent_Bacher]

One request from the field: please leave the log field names and keys exactly as they are. Log Exporter output feeds downstream pipelines everywhere (Elasticsearch in our case, Splunk and others elsewhere), and all parsers, index mappings and dashboards are built against today's field names. Any rename, even a well-documented one, means rebuilding the whole ingest chain on the customer side. Improve the UI as much as you like, but the field names underneath must stay stable.

[Don_Paterson]

Hi Tomer,

Where can we find more info on this please?

I am looking for the legacy SmartEvent GUI (policy editor) and about the reports and customisaton.

Regards,

Don