Origin column is empty, R81.20 JHF T84

saitoh

Hi experts,

env: CP3600 R81.20 with JHF Take 84, standalone

I cannot conduct research on the issue because the appliance is not within my reach now.

Our customer reported some appliances I configured produced fw.log with Origin column empty.

It causes some trouble for them analyzing access log.

What can be the root cause for this behaviour?

Saitoh

sliver bullet: casting repero or tossing it into the harbor

Chris_Atkinson

What issue does it cause if it's truly a standalone deployment are logs being sent to a SIEM?

I'm hoping you aren't expecting different origins other than the local machine itself?

CCSM R77/R80/ELITE

Martijn

Hi,

With limited information, it is difficult to tell what is going on.

What is the uptime of the appliances?
Did you tried to restart the Check Point services / reboot the appliance?
Did you perform a logswitch?

Take 84 is from september 2024 so I would advice to upgrade to the latest recommended take before investigating this issue.

Regards,
Martijn

Are you a member of CheckMates?

Origin column is empty, R81.20 JHF T84