Automatic completion not working for new host objects

[-Darren-]

Hi,

For a while now we have noticed that when using logs and monitoring, newly created hosts objects are not available for auto completion when typing part of the host name.  Also when we type the correct host name, no logs show.

Its a PITA as we have to type the IP address of the host for the logs to show. The logs view then shows only the IP address and not the Host name associated with the IP.

We are using the default log and monitor view and not the new log viewer.

Any help appreciated.

Thanks

[PhoneBoy]

Define newly created: over what time period are we talking?
Has the policy been installed since then?

[-Darren-]

Hi PhoneBoy,

This has been happening as far as we remember since we upgraded to 80.20 back in November last year.

Yes the policy has been pushed many times since the new host has been added. 

[_Val_]

If you did not install policy after creating the new host object, or/and did not install DB on your Log Server, you will only see IP address. Install DB, that will resolve the issue.

[-Darren-]

Hi Val,

Policies have been pushed since creating new hosts.

The Management Database and logs are on the management server, its showing network object names for older objects added before the 80.20 upgrade.

Thanks

[Dror_Aharony]

Hi Darren,

I wanna make sure I understand what you mean. You mean there's no Logs suggestions when you type partial name of new R80.20 hosts/objects?

but there is of older pre-upgrade objects?

Show us a pic, please.

Are you doing a complete free-text suggestion attempt or field filtered like my src?

*Attached my Pic of a successful logs query suggestion of src field.

[-Darren-]

Hi Dror,

For example, I have two static IP's (1) Lan address (2) Wifi Address,

(1) was created back on 77.30 and (2) was created 2 months ago on R80.20.

Using a filtered field src:darren brings up only my Lan address from 77.30 and shows the logs for Darren-{surname} if filtered.

A free text suggestion search for darren-{surname}-wifi shows no logs. There are logs if i filter for my Wifi IP.

See attached jpg

Thanks for assisting

[Dror_Aharony]

Would you like to try searching for it once with it's full/exact name? (src:Darren-...-wifi)

and then re-check if it appears?

Our logs query suggestion mechanism can be better, and we are working on improving it all the time. I'll try to push a fix in this area for the next version.

[-Darren-]

Please see the attached screens,

1st Screen shows searching for the full name of new object created in R80.20 shows an error and resolving to an IP address and it spends 79 seconds searching for logs.

 2nd Screen shows searching for logs using the IP address of the Wifi Object.

I'll get a call logged with TAC

Thanks All

[-Darren-]

Forgot to add,

When searching for src:darren, it only shows the older 77.30 object and not both lan and Wifi objects

[Dror_Aharony]

It appears this Wifi host object is special somehow, if it's not able to resolve it.

It's a more general query resolving issue, not just a suggestion issue.

Can you detail how you've configured it? anything special there?

Yes - TAC case is needed here.

[-Darren-]

Hi Dror,

Nothing special about how the object was created,

Hosts were created in the gui using object explorer or the right hand side card.

Its not just one host this affects, there are around 40-50 maybe more. All created since upgrading to 80.20.

A TAC has now been raised. Will update once we find the issue.

Thanks

[_Val_]

Please open a TAC case then