Export Logs to another Log Server

[Michael_Briceño]

Hello friends, I hope your help with this: Do you know if there is a way to export traffic logs (firewall, appcontrol, ips, etc) from a logserver to another logserver and that this can be visualized through smartlog / smartviewTracker ..? ?
The purpose is to have the same logs on these two logserver since for SMB type equipment (1200R to be specific), the sending of logs in simultaneous to two logserver is not supported. I have seen that you can send one logserver at a time, and send another logserver as long as the first logserver is unreachable.
Can we have it sent to both at the same time? I will greatly appreciate your comments.

Regards,

Michael Briceño.

[Vladimir]

Disclaimer: following suggestion is a hack and I am not at all certain that it will work, but:

If your management server is a VM, try cloning it, attach its vNIC to a dedicated physical NIC of the host and connect that NIC to a mirror port on the switch that the logs are passing through. 

It'll be actually funny if works.

[Vladimir]

Or in officially approved way:

[Michael_Briceño]

Hello Vladimir,
Thank you for your comments. But I've seen that for SMB teams, the log forwarding option is not available either. It is clear to me that it is a limitation of the model or type of device.

I have tried to send logs from the same 1200R device as syslog to this second logserver, but only send configuration logs but no traffic.

Will there be another way to make this possible? Any comment is helpful.

Regards,

Michael Briceño.

[Vladimir]

Forward logs from the primary logging server to the secondary. You'll have to configure the log forwarding not on the gateway, but on your primary management/log server.

I do not believe that you can circumvent the logging limitations of these gateways without adversely impacting their performance.

[Michael_Briceño]

Oh oh ok! had misunderstood. I'm worth it and I'll tell you how it went. Thanks.

[Sven_Glock]

Which version of management are you running?

Is your secondary logserver a Check Point Log server, too?