cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

log_indexer_custom_settings.conf

We just migrated our MDM and I was looking at what we may have missed.  The root log indexer custom settings file was missed, /opt/CPrt-R80/log_indexer/log_indexer_custom_settings.conf.  With 3 MLMs and an HA MDM, I am not sure what it should be.  This was my best guess.

(
        :data ("/opt/CPrt-R80/log_indexer/data")
        :server_port ("127.0.0.1:18244")
        :dns_resolving (true)
        :dns_backresolving (true)
        :connections (
                :domain (
                        :management (
                                :name (10.2.2.14)
                                :uuid ()
                                :is_local (true)
                                :read_mode (CPMI)
                        )
                        :log_servers (
                                : (
                                        :name (10.2.2.16)
                                        :uuid ()
                                        :folder ("/opt/CPmds-R80/log")
                                        :is_local (true)
                                        :read_mode (FILES)
                                )
                               : (
                                        :name (10.3.2.16)
                                        :uuid ()
                                        :folder ("/opt/CPmds-R80/log")
                                        :is_local (true)
                                        :read_mode (FILES)
                                )
                               : (
                                        :name (10.1.2.16)
                                        :uuid ()
                                        :folder ("/opt/CPmds-R80/log")
                                        :is_local (true)
                                        :read_mode (FILES)
                                )
                        )

Should it be that way in the CMAs too?  For each $INDEXERDIR/log_indexer_custom_settings.conf.  This started because we are getting the 3rd scenario message in sk116122.  Not much guidance in the docs for HA and multi log server configurations.

Hmmm.

0 Kudos
1 Reply
Admin
Admin

Re: log_indexer_custom_settings.conf

I'm not clear what you're trying to achieve here.

Also it's clear this is in the wrong space, so I moved it to: https://community.checkpoint.com/community/management/visibility-monitoring?sr=search&searchId=3931f...

0 Kudos