cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Log Time difference

I have Management R80.10 take 121. Times in logs is one hour late.

I tried sk61941 but no success, enabling NTP didn't help.

When running #hwclock --systohc time is synchronized but not the logs timestamp.

We using few time based rules. Time issue affected rules also.

It looks like there is a bug.

Is there any information if this is bug or maybe I am doing something wrong?

Tags (2)
12 Replies

Re: Log Time difference

Log time stamps could be affected by log server own timezone. Please make sure both MGMT and GWs are configured the same way and show the same local time and time zone.

Also, why are you using ULAST? ULAT should be good enough.

Re: Log Time difference

Thank you for reply,

It is stand-alone deployment. I tried with ntp and without ntp. Unfortunately still 1 hour late on log...

ULAST and ULAT is the almost same. It is syncing from official local time server.

Timezone is not important Smiley Happy. We can change it. 

0 Kudos

Re: Log Time difference

Try changing it to ULAT and if this does not help, please open a support request with TAC

0 Kudos

Re: Log Time difference

I contacted TAC engineer. Then TAC engineer received answer from R&D.

It is expected issue and they haven't any plan to fix next jumbo hotfix. Also they will solve on R80.20.

Unbelievable...

0 Kudos

Re: Log Time difference

Hi,

I apologize for the phrasing of the response by our Support.

There are certain fixes we just cannot do for jumbo updates of a version. Jumbo fixes are stability fixes. If there is a bigger risk level involved, we choose to delay the fix and bundle it with a version upgrade, for quality reasons. I hope that you understand.

With the recent change in strategy of issuing a security management version more frequently (see: R80.20.M1 and the next ones) this means more solutions will be on a maintrain release than before.

0 Kudos

Re: Log Time difference

Tomer, could you please advise how to fix or work it around meanwhile?

0 Kudos

Re: Log Time difference

Sorry i don't have the details here. It is probably better to ask on that TAC case if there is a workaround that can be done.

0 Kudos

Re: Log Time difference

Okay, I will follow up myself

0 Kudos
rubasjak
Ivory

Re: Log Time difference

hello Valeri,
i would like to ask you if there is any new info about this issue. Our customer also has this problem with R80.10 and we would be interested in workaround for now.
Thank you,
JR
0 Kudos

Re: Log Time difference

Thank you for your information.

That issue should be fine for me. But I spend 2 days on this issue. 

I think Check Point need to release any official statement on every known bug...

Re: Log Time difference

oh, Check Point doesnt have such a resources for that... update it every 30 minutes with new bugs 😮

Just wait for R80.30 and till then enjoy R77.30.

Kind regards,
Jozko Mrkvicka

Re: Log Time difference

At Check Point, we appreciate your opinion. Let me just say that we take quality of our products very seriously. If you have any particular request or suggestion, feel free to contact me directly at any time.

Thank you