Can't find "cp_log_export" on R80.20

[Yun9-4nn]

Hi All,

I am having trouble to set syslog configuration in Quantum spark 1530 - R80.20.  I couldn't  have "cp_log_export" command present in clish and expert mode, and I tried to locate it by using 'find' command but that gave no resault.

Please help me to get this feature set. Thanks.

Log Exporter - Check Point Log Export

[_Val_]

Log exporter only works on Quantum, and not Quantum Spark. On SMB appliances, use WebUI to set up a syslog server to send logs to.

[Yun9-4nn]

Hi Val, thanks for the answer. 

[Tal_Paz-Fridman]

We'll also update the SK to reflect the supported / unsupported platforms

[christian_hc]

Hi,

How to convert the log to CEF on the Quantum Spark?

Thanks!

br,

Christian

[PhoneBoy]

This functionality is not supported on locally managed SMB devices.

[christian_hc]

Hi,

It is not locally managed but cloud managed, can't remember what it was called.

BR,Christian

[PhoneBoy · Accepted solution]

Regardless the functionality is not on the SMB platform itself, it is on the management.
Smart-1 Cloud supports it but it’s an extra cost, not sure SMP supports it.

[christian_hc]

Confirmed, I was afraid of that. It seems that the syalog converter is an add on binary, I wonder if it would be possible to install it manually (I suppose it is after all only a complex regex function..)

[PhoneBoy]

Log Exporter runs on management platforms and/or log servers, which is where logs for gateways are forwarded.
It does not run directly on an SMB appliance; that is an RFE.

When management is in the cloud (Smart-1 Cloud or SMP), the logs are converted and sent from there.
Public cloud providers charge to transfer data out of the cloud, which is covered in the nominal cost we charge for this "feature."