I am curious about improvements related to Logging and Indexing in r81

[ChoiYunSoo]

Hi

I am curious what improvements have been made in logging and indexing of the management server since the major version change from r80.20 to R81 has been made.

If you look at the release notes for R81 you will find the following statement:
'Significant improvements to log indexing, queries, SmartEvent views and reports.'
However, it doesn't seem to provide any data on what logic changes were made and how efficient they became.

Please let me know if there is any related admin guide or sk number

[the_rock]

I see below:

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/103832/FILE/CP_R81_ReleaseNotes.pdf

Logging and Monitoring
n New API for log queries to fetch logs through API. Use a single API management command to query
for logs or statistics.
n Significant improvement in log indexing, queries and SmartEvent views and reports.
n Export logs with a timestamp of milliseconds, to construct a chain of events more easily and
efficiently.
n Log attachment API to automatically fetch log attachments with Log Exporter, or API for logs.

However, if you need more info, I would contact TAC and get official vendor response.

Hope that helps.

Andy

[Chris_Atkinson · Accepted solution]

In general, sk180180 is also a helpful SK when reviewing such things - please consider R81.10.

Example: