Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
prasanga
Explorer

System Incidents Report

Hi

Where can i view or get a report of system related incidents happened in the firewall giving a time period ?

Ex : HA failovers / Interface up-down incidents / Hardware level issues happened

regards,

Prasanga

0 Kudos
6 Replies
796570686578
Collaborator

HA Failovers you can see with the command "cphaprob show_failover".  Not sure about Interface statuses but they are usually logged in /var/log/messages as far as I know.

0 Kudos
Tal_Paz-Fridman
Employee
Employee

Hi

 

Use the cpview command which contains an infinite amount of information about the gateway:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

 

It also has a history mode (cpview -t) to see historical values and incidents.

 

HTH

Tal

0 Kudos
Tal_Paz-Fridman
Employee
Employee

0 Kudos
Timothy_Hall
Legend Legend
Legend

Try this log filter in the SmartConsole: origin:gwname AND type:Control

You must capitalize "Control" for that filter to work.  If the gateway is using ClusterXL those logs will show interface failures detected by CCP, however some system events only appear in /var/log/messages unless you do this: sk102995: How to export syslog messages from Gaia Security Gateway to a Log Server and view them in ... 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
Ruan_Kotze
Advisor

Surprised this has not been mentioned yet, but check out HealthCheck Point.

0 Kudos
prasanga
Explorer

Found a place to view these in "SmartView".

Can filter by Type - "System Alert" and Blade- "Firewal".

Thanks all for the responses.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events