Management High Availability : are logs synced too?

[Louis_Poulin]

Running R80.20, when you have management HA, are the logs synced between the security management servers?

If I have 6TB of logs on one security management server and I configure a secondary management server, will it sync 6TB of logs from the primary server to the secondary server?

And what will happen with logging when the primary management server goes down? Will the gateways start to use the secondary as their log server?

I cannot find anything in the Security Management R80.20 documentation about logs. On page 271, it only mentions :

• policies
• rules
• user definitions
• network objects
• system configuration settings.

[Vladimir]

Logs are not synced between management servers.

Please see https://community.checkpoint.com/t5/General-Management-Topics/Document-Logging-in-R80-in-a-single-se...

Regards,

Vladimir

[Louis_Poulin]

I Don't know if it is because I'm running VSX, but I cannot specifiy which server where to send the logs:

Do you think it might be a limitation of VSX? Or is it because I didn't switch to Management HA yet?

[Vladimir]

Have you already installed the second management server and have configured it as "Secondary Management" during First Time Configuration Wizard?

After that, have you created its object, established SIC with it, installed the database, published changes and installed the policy?

If any of the above steps were omitted, then you will not be presented with the log target selection section.

[Martin_Valenta]

That you set on VSX cluster object and not on virtual system