Log exporter and mobile access blade

[D_TK]

Started using the log exporter to send logs to a new SIEM.  The only issue so far is that i'm not seeing anything from the mobile access blade sent.  i'm getting all other logs.  I've even modified this file to only send mobile access, and absolutely nothing arrived at the SIEM.

Version is r81.10

Any ideas would be greatly appreciated.

[PhoneBoy]

Are you seeing Mobile Access logs in SmartView?
Note that anything involving a VPN client won’t necessarily show as Mobile Access.

[D_TK]

Yeah, we're not looking for their traffic logs.  We're more interested in login locations so we can trigger the "geographically improbable" access alarm  if jane tries to log on from gig harbor and paris at the same time.

Here's what i currently see in smartview if i filter on blade:mobile access

[PhoneBoy]

I'm wondering if "Mobile Access" is actually the correct product here.
Try checking the raw logs with CPLogFilePrint: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[D_TK · Accepted solution]

You are correct, it's not considered "Mobile Access".  Opened a tac and got it sorted out pretty quick.  This config got us to where we wanted to be: