No logs in SmartConsole

[Bruy]

Hello everyone. I built up a standalone machine R81.10 in VMware Workstation. And I don't have logs in SmartConsole. I think i need to do something with what is on picture, but i dont know how to enable all this functions. 

[Chris_Atkinson]

How is the track column in the policy configured and what traffic flow isn't logging when it should?

Have you tried "installing database" from the menu or a reboot?

[the_rock]

Hm...I see whats wrong with that picture (snimak ekrana...I think that means screenshot from what I remember of my cyrilic alphabet lol). Anyway, see, with standalone config, there is no separate management server, so technically, it would be logging locally really. 

Did this ever work? When did you notice the issue? Some basic things you could try, since its a lab is cpstop/cpstart, reboot, fw logswitch...

[Bruy]

Thank you for answer. There weren't any logs in smartconsole ever. I tried basics commands but they didn't help me. I have a logs in SmartView Tracker if it will help you

[the_rock]

Im free later if you want to do remote. Im in EST time zone.

[Bruy]

Yeah, why not. I leave in UTC+3 zone. Contact me [email protected] to discuss further

[the_rock]

Ok, emailed you directly.

[the_rock]

Update from remote session with Ivan:

we ran cpstat fw -f log_connection...shows logs are sent and we know that, since they are showing in smartview tracker, just NOT in dashboard

ran through sk

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

verified masters file

also did below and rebooted:

Stop Check Point services:

[Expert@FW]# cpstop

Move all the accumulated FireWall log files to another directory:

[Expert@FW]# mkdir -p /var/log/temp_logs
[Expert@FW]# cd $FWDIR/log/
[Expert@FW]# mv *.log* /var/log/temp_logs/

Reboot:

[Expert@FW]# reboot

Check if FireWall log files were created again:

[Expert@FW]# ls -l $FWDIR/log/fw.log*

Check if logs are being sent to the Security Management Server.

Also, when box was rebooted, when we logged into dashboard, gave warning that /va/log needed at least 2 GB free space and it was 1.5 at the moment and there was only 1 file we could delete bigger than 100 MB

Unless someone else has different suggestion, I think this would need to be rebuilt and more space assigned to /var/log dir

Also, since lvm_manager cant run to resize directory unless in maintenance mode, not sure if there is an easy way to do this in vmware, but if there is a way and can be resized, Im pretty sure that would fix this issue without having to rebuild.

[aeronl12]

Hi, Also, tried to create a Check Point Standalone VM for labbing and learning purposes, and notice the same behavior where the Local Logs are not showing in the Logs & Monitor Log View.  See attached image.

[Amir_Senn]

Try to make sure/switch to Index mode. I see from the photo that you're opening a log file.

[the_rock]

Might be by default. I see same in all my las, but works fine.

Andy