Move log file to syslog server

[Shivajith_S]

May I know is it possible to move this /var/log/opt/CPrt-R80/log_indexes and /var/log/opt/CPrt-R80/log to syslog server.

If yes can any one send steps for this to be performed.

[Vladimir]

You'll have to use Log Exporter - Check Point Log Export to achieve that.

There is also a How to export Check Point logs to a Syslog server using CPLogToSyslog , but it's being deprecated.

[Shivajith_S]

Thanks Vladimir Yakovlev for your reply ...

My requirement is need to move the Log file from Checkpoint management server to Syslog server ,While  CP management server every time generating the logs files and index files under these locations /var/log/opt/CPrt-R80/log_indexes and /var/log/opt/CPrt-R80/log .

For R77.30 there are some commands available to move the tracker logs to syslog server but I am not sure It will work for R80.1 as well .

[Vladimir]

Use the Log Exporter - Check Point Log Export if you want same logs as in your management server.

If you are trying to get your gateways to log directly to syslog, see the text in green at the beginning of this document: https://community.checkpoint.com/docs/DOC-2922-logging-in-a-single-security-domain https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...