Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Explorer

Can the default be changed for the logging time period results?

I haven't been able to find a setting anywhere, but when I was at CPX one of the CP engineers swore there was a setting to customize a default time period used when users launch logs in R80.10. As it stands today the default is set to 7 days, and we have seen a hit in performance with the expansion of user access. Realistically most of them would only need "Last hour" for troubleshooting purposes. I haven't been able to find the answer in CP documentation so any input is appreciated. Cheers!

13 Replies
Highlighted
Advisor

I also wish that it was easy to change to "Last hour" instead of 7 days. As usually when I need to see logs it's something that I'm currently troubleshooting and then last hour what I need. 

You can close your SmartConsole and take a look in C:\Program Files (x86)\CheckPoint\SmartConsole\R80.10\PROGRAM at the SmartConsole.exe.config file. Maybe it's possible to change the value there. Haven't tried myself. 

0 Kudos
Reply
Highlighted
Champion
Champion

Easy, just open the menue and select Tools > Query Settings:

Now choose, name what you want:

Add a new log tab and enjoy  !

Highlighted
Contributor

Not that easy with +40 administrators. This should be done centrally. Not on each endpoint.

/Henrik

0 Kudos
Reply
Highlighted
Champion
Champion

I see no problem with every Admin configuring his own default time span. Even if most of them need only one hour, i would refrain from setting that centrally. But if really needed, you can involve TAC in finding a way to enable that...

0 Kudos
Reply
Highlighted
Contributor

The use case being that telling +40 admins to change various default settings in SMC, I guess 2 people would actually be bothered to change it.

Plus education the same admins for the various features that is user customizable is a pain.

0 Kudos
Reply
Highlighted
Champion
Champion

If they get payed to do their job customization should be self-evident 😉

0 Kudos
Reply
Highlighted
Advisor

Nice! Just don't put anything in the "Default query" field and it works as you want it Nathan.

0 Kudos
Reply
Highlighted
Champion
Champion

As shown in the screenshot, i did name it 1h, and on new Log tab or Dashboard re-open, Log tab showed Last Hour.

0 Kudos
Reply
Highlighted

How change default time frame of SmartView ?

0 Kudos
Reply
Highlighted
Participant

I have the same question. Our Smartview is quite slow with getting data for de default 7 days, so to start with 1 hour default for anyone loggin in would be nice.

0 Kudos
Reply
Champion
Champion

Yes, see my response below about slow startup of new logging tabs and a trick to make them start up like lightning:

https://community.checkpoint.com/t5/Logging-and-Reporting/Disable-Automatic-Log-Search/m-p/82171/hig...

 

Gaia 3.10 Immersion Self-paced Video Series
now available at http://www.maxpowerfirewalls.com
0 Kudos
Reply
Highlighted

Timothy_Hall, thanks but our question about SmartView exactly, that availible on https://sms_ip/smartview/

We olredy opened case in support, and engineer tel us wat this curently not supported and if we actualy need this feature contact through our sales manager to open Feature Request.

You know, how do something with with SmartView exactly?

Tags (3)
Highlighted
Participant

Thanks Timothy, but, like below, my question is about SmartView. The SmartConsole setting was indeed also valuable to us.
0 Kudos
Reply