General overview and reports for smart event and logs and monitor are disabled error

[the_rock]

Hey guys,

Im hoping someone can shed some light on this. Customer has R81.20 mgmt with smart event enabled, both server and correlation unit and since Saturday, March 1st, they keep seeing below message in smart console, which to me, makes no sense at all, since we even applied eval licnse and their local SE also gave them one valid till June 30th, but same issue.

We even rebooted, did evstop; evstart, no luck.

This keeps showing up no matter what we do, but logs are showing okay.

General overview and reports for smart event and logs and monitor are disabled

Only thing I could find, both on support site and here is link below, thats it.

https://community.checkpoint.com/t5/Management/Expired-General-Overview-and-Reports-for-SmartEvent-a...

If someone has any ideas/suggestion, please be free to share.

Tx as always!

Andy

[Chris_Atkinson · Accepted solution]

Are there multiple management licenses applied, are any of these the legacy type from before "NGSM" ?

[the_rock]

Hey Chris,

I believe there might be, but not 100% sure. I can ask the customer to send the output of cplic print. We were thinking of removing some of them yesterday, but did not want to take a risk, since were not certain if they are still needed or not.

Tx as always for the help.

Andy

[Chris_Atkinson]

No worries possibly something like sk153294 might apply...

[the_rock]

Sorry Chris, maybe a dumb question, but how can you tell 100% if license is NGSM? Im a total rookie when it comes to CP licensing, though been around the product for almost 20 years 🙂

All I always do is apply eval and "call it a day".

Andy

[Chris_Atkinson]

The SKU as it appears in UC is the usual sign e.g. CPSM-NGSM5  vs CPSM-PU003 but for sure getting a view of the cplic print output will help.

[the_rock]

Sounds good! That rings a bell, I believe I saw it yesterday. I messaged them on teams, lets see if we can do remote shortly and I will check. Will update soon.

Thank you!

Andy

[the_rock]

Hey @Chris_Atkinson 

Please see below.

Andy

[Expert@cmhfwmgmt:0]# cplic print

Host             Expiration  Features

10.255.44.200    never       CPSG-VE+6 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-URLF CPSB-IPS-S1 CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-EECC5B2BBB0E

10.255.44.200    2Apr2025    CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-FBB07518351C

10.255.44.200    never       CPSG-VE+6 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-URLF CPSB-IPS-S1 CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-EECC5B2BBB0E

10.255.44.200    never       CPSG-VE+6 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-URLF CPSB-IPS-S1 CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-EECC5B2BBB0E

10.255.44.101    never       CPSG-VE+6 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-186D0C07B202

10.255.44.101    never       CPSG-VE+6 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-186D0C07B202

10.255.44.200    never       CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-04D530FACDC0

10.255.44.200    never       CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-8C-E1-87

10.255.44.200    never       CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-8C-C3-E1

10.255.44.200    never       CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-EECC5B2BBB0E

[the_rock]

@Chris_Atkinson 

We are thinking of removing this one? You think its safe?

Andy

10.255.44.200    never       CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-04D530FACDC0

[the_rock]

Thanks Chris, removing NGSM license fixed the issue, you are the BEST man!

Andy

[Chris_Atkinson]

Glad I could help, please make sure the other license/blades/contract is renewed and reapplied at the earliest.

[the_rock]

Yes, we made sure logging works and policy was pushed as well. I asked customer to double check with their SE about the license they were given, but appears that one was also NGSM, so I told them maybe dont reattach it until you confirm its good.

Andy