Install policy error

[TUNGPHAM]

I am having the following problem:
when i install policy from SMC to gateway , i get error , and install process stops at 0% , it's been 2 hours and still 0% . Is there any way to cancel install this policy, or do I have to reboot checkpoint mgmt
Many thanks !!!!!

 

[just13pro]

What is the error?

[TUNGPHAM]

it not error , but it stuck at 0% long time , and i can't use SMC to create rules

[_Val_ · Accepted solution]

Reboot and try again. If the situation is still the same, open a support call with TAC, https://help.checkpoint.com

[TUNGPHAM]

i reboot and it work 
But after reboot checkpoint mgmt with cpstop, cpstart , i lost my audit log on SIEM  
i export log with command : cp_log_export add name splunk target-server 10.*.*.*  target-port 7171 protocol udp format splunk - -apply-now
before  reboot it still had audit log and send alert to telegram 
how can i check this 

cp_log_export show

name: splunk
enabled: true
target-server: 10.*.*.*
target-port: 7171
protocol: udp
format: splunk
read-mode: semi-unified
export-attachment-ids: false
export-link: false
export-attachment-link: false
time-in-milli: false
export-log-position: false
reconnect-interval: Not configured, using default

i show cp_log_exort still running , and traffic log had still there

[TronNQ]

Hi Bro,

Could you check the SK:

https://support.checkpoint.com/results/sk/sk122323

https://community.checkpoint.com/t5/Management/Log-Exporter-guide/td-p/9035

[TUNGPHAM]

thank you , i checked but not found anything

i  had error after reboot 
i don't know it does it affect this 

[TronNQ]

Please check SK below:

https://support.checkpoint.com/results/sk/sk121217

[TronNQ]

Sorry, I haven't looked closely at the image you provided. In the picture I see the message "Task was interrupted because of server restart". If you can still install the policy now, everything looks fine.