cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Log Exporter stopped reading logs

Hello again,
A new problem, this time with the log exporter:

[Expert@cplog01p:0]# date
Tue Jul 02 09:40:40 CEST 2019

[Expert@cplog01p:0]# cp_log_export status

name: fw.domain.com
status: Running (3986)
last log read at: 27 Jun 11:51:02
debug file: /opt/CPrt-R80.20/log_exporter/targets/fw.domain.com/log/log_indexer.elg

--> Log Exporter has stopped reading logs since some days but is still running.

We did a cp_log_export restart and it worked again.

Does someone know how to monitor the Log Exporter stopped working even when the process is still running?
Is this problem known?

Installed version of cplog01p:

[Expert@cplog01p:0]# cpinfo -y all

This is Check Point CPinfo Build 914000182 for GAIA
[IDA]
   No hotfixes..

[CPFC]
   HOTFIX_R80_20_JUMBO_HF_MAIN

[MGMT]
   HOTFIX_R80_20_JUMBO_HF_MAIN

[FW1]
   HOTFIX_R80_20_JUMBO_HF_MAIN

FW1 build number:
This is Check Point Security Management Server R80.20 - Build 007
This is Check Point's software version R80.20 - Build 047

[SecurePlatform]
   HOTFIX_GOGO_LT_HALO_JHF

[CPinfo]
   No hotfixes..

[DIAG]
   No hotfixes..

[Reporting Module]
   HOTFIX_R80_20_JUMBO_HF_MAIN

[CPuepm]
   HOTFIX_R80_20_JUMBO_HF_MAIN

[VSEC]
   HOTFIX_R80_20_JUMBO_HF_MAIN

[SmartLog]
   No hotfixes..

[MGMTAPI]
   No hotfixes..

[R7520CMP]
   No hotfixes..

[R7540CMP]
   No hotfixes..

[R76CMP]
   No hotfixes..

[SFWR77CMP]
   No hotfixes..

[R77CMP]
   HOTFIX_R80_20_JHF_COMP

[R75CMP]
   No hotfixes..

[NGXCMP]
   No hotfixes..

[EdgeCmp]
   No hotfixes..

[SFWCMP]
   No hotfixes..

[FLICMP]
   No hotfixes..

[SFWR75CMP]
   No hotfixes..

[CPUpdates]
   BUNDLE_R80_20_JUMBO_HF_MAIN_gogoKernel    Take: 47

[rtm]
   No hotfixes..

 

0 Kudos