Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT
AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails
What's New in Check Point SASE
The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses
CheckMates Go:
Half is Not Enough
When I checked the audit log ,there are not any logs for any times. How could it happen? Does Check Point delete audit log history? How can fix this ? Thank you so much for now.
Thank you for your all kindly assistance. We resolved the problem with the reboot.🙈
Did you revert to a previous revision recently?
How is the available storage space for the system?
Which Jumbo take is the system currently running?
I have not an idea if it reverts to previous revision . I can see the currently revisions but I can not see details.
Take:78 in use.
I have not an idea if it reverts to previous revision . I can see the currently revisions but I can not see details.
Take:78 in use.
I have not an idea if it reverts to previous revision . I can see the currently revisions but I can not see details.
Take:78 in use.
Did you try Legacy SV Tracker ? If there also nothing is shown:
Connect to SMS using ssh and look into /var/log/audit/audit.log !
If no Audit logs are present, contact TAC ! According to https://support.checkpoint.com/results/sk/sk105805, Audit logs can be reduced but not disabled... Could be a FWM process issue (look at cpwd_admin list output).
Did you try Legacy SV Tracker ? If there also nothing is shown:
Connect to SMS using ssh and look into /var/log/audit/audit.log !
If no Audit logs are present, contact TAC ! According to https://support.checkpoint.com/results/sk/sk105805, Audit logs can be reduced but not disabled... Could be a FWM process issue (look at cpwd_admin list output).
Did you try Legacy SV Tracker ? If there also nothing is shown:
Connect to SMS using ssh and look into /var/log/audit/audit.log !
If no Audit logs are present, contact TAC ! According to https://support.checkpoint.com/results/sk/sk105805, Audit logs can be reduced but not disabled... Could be a FWM process issue (look at cpwd_admin list output).
the last audit log was on 29 Jan. After that there is no audit log into "/var/log/audit/audit.log".
According to sk105805, the options clicked on the system logging.
According to the command "cpwd_admin list," all services are up.
in the meantime,
I would like to share a correction which is the hotfix version take:78.
the last audit log was on 29 Jan. After that there is no audit log into "/var/log/audit/audit.log".
According to sk105805, the options clicked on the system logging.
According to the command "cpwd_admin list," all services are up.
in the meantime,
I would like to share a correction which is the hotfix version take:78.
the last audit log was on 29 Jan. After that there is no audit log into "/var/log/audit/audit.log".
According to sk105805, the options clicked on the system logging.
According to the command "cpwd_admin list," all services are up.
in the meantime,
I would like to share a correction which is the hotfix version take:78.
I agree with @G_W_Albrecht , definitely contact TAC for this. Personally, I would install latest jumbo (take 87) and see what happens, but if no change, open a support case, for sure.
I agree with @G_W_Albrecht , definitely contact TAC for this. Personally, I would install latest jumbo (take 87) and see what happens, but if no change, open a support case, for sure.
I agree with @G_W_Albrecht , definitely contact TAC for this. Personally, I would install latest jumbo (take 87) and see what happens, but if no change, open a support case, for sure.
According to sk105805, Audit can not be disabled - so this is a new issue afaik. No harm in latest Jumbo install, but i fear it will not help.
According to sk105805, Audit can not be disabled - so this is a new issue afaik. No harm in latest Jumbo install, but i fear it will not help.
According to sk105805, Audit can not be disabled - so this is a new issue afaik. No harm in latest Jumbo install, but i fear it will not help.
You are probably correct, I also doubt it will help, but does not hurt to try.
You are probably correct, I also doubt it will help, but does not hurt to try.
You are probably correct, I also doubt it will help, but does not hurt to try.
Chris_Atkinson
Chris_Atkinson
Chris_Atkinson
Take 82:
PRJ-42859,PRHF-26649
Security Management:
After performing the "Revert to Revision" operation, new Audit logs cannot be seen in the Logging&Monitoring View in SmartConsole.
Take 82:
PRJ-42859,PRHF-26649
Security Management:
After performing the "Revert to Revision" operation, new Audit logs cannot be seen in the Logging&Monitoring View in SmartConsole.
Take 82:
PRJ-42859,PRHF-26649
Security Management:
After performing the "Revert to Revision" operation, new Audit logs cannot be seen in the Logging&Monitoring View in SmartConsole.
Thank you for your all kindly assistance. We resolved the problem with the reboot.🙈
Thank you for your all kindly assistance. We resolved the problem with the reboot.🙈
Thank you for your all kindly assistance. We resolved the problem with the reboot.🙈
Well, whatever it takes to fix the problem...good job 👍
Well, whatever it takes to fix the problem...good job 👍
Well, whatever it takes to fix the problem...good job 👍
Tal_Paz-Fridman
Tal_Paz-Fridman
Tal_Paz-Fridman
Can you run a simple test, for example define a new Host and Publish and check to see if the Audit Log is created?
Can you also check various time frames in log query?
Can you run a simple test, for example define a new Host and Publish and check to see if the Audit Log is created?
Can you also check various time frames in log query?
Can you run a simple test, for example define a new Host and Publish and check to see if the Audit Log is created?
Can you also check various time frames in log query?
I did but still no any log. It still says "no matches found for your search"
I did but still no any log. It still says "no matches found for your search"
I did but still no any log. It still says "no matches found for your search"
