Management log conversion

[Sajenthiran_Mic]

We a currently facing following error message on the Management Server R80.40 using following checkpoint comand:

fwm logexport -n -p -i <Log File Name> -o <Output>

sk39573 How to read a Check Point log file in its native format

error message:

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4588

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4589

…..

[Timothy_Hall]

Run a fw repairlog <Log File Name> command and try again.  If that doesn't work see here: sk176644: The fwm logexport command does not work after an upgrade

[Sajenthiran_Mic]

I tried to  use the command:

fw repairlog <Log File Name>

it did not help.

output looked still the same with R80.40 Jumbo hotfix 156

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4588

CLogExportUtil::PrintRec: Error: Failed to get field log_sys_message(15)

Error: Failed to print record at position 4589

[Timothy_Hall · Accepted solution]

Looks like your fwm logexport command is unable to decode/locate a field/column in certain log file entries; probably going to need a TAC case to figure out what is happening here.

[Sajenthiran_Mic]

Well i notice that the latest hotfix released was fixing the issue (JH Take 156).