Cpview history export date window

[Rui_Pereira1]

Hi,

In R80.10, the cpview history export collects data for the last 30 days.

In R80.30, the cpivew export only has the past 7 days.

With R80.30, is there anyway to have the last 30 days on the cpview export?

Thanks

[Noam]

cpview export should export all data in R80.30. if you see only 7 days it could be due to lack of memory or other reasons..

do you see the full month when running cpview -t?

[Rui_Pereira1]

I see some minutes in difference the export goes some more minutes in the past than cpview -t.

I assume it is because cpview -t was done some minutes after the export.

So I consider cpview -t has the same time window as cpview export.

I'm not able to see a full month on cpview -t.

I've done the export some minutes ago on a cluster and active unit has 7 days and 9 hours, stand-by unit has 9 days and 15 hours.

Also disk is not a problem since all partitions have free space, /var/log has almost 70G free space.

Memory should not be a problem, each unit has 16GB and more than half is free.

CPU could be an issue, because I see some spikes during the day, but it is only on the main unit, not the stand-by.

And last failover was on July 15, and last reboot was before that. 

[Noam]

sorry, it's hard to tell what happened... looks like now everything is working ok

it could be that cpview history daemon (cpview_services) was off for awhile or some change in cpview history db

you can contact Check Point support or wait to see if the problem persists

[Rui_Pereira1]

TAC detected an issue and a specific HF was provided.

After HF install, cpview is recovering the 30-day window.