Update from remote session with Ivan:
we ran cpstat fw -f log_connection...shows logs are sent and we know that, since they are showing in smartview tracker, just NOT in dashboard
ran through sk
verified masters file
also did below and rebooted:
Stop Check Point services:
Move all the accumulated FireWall log files to another directory:
[Expert@FW]# mkdir -p /var/log/temp_logs
[Expert@FW]# cd $FWDIR/log/
[Expert@FW]# mv *.log* /var/log/temp_logs/
Check if FireWall log files were created again:
[Expert@FW]# ls -l $FWDIR/log/fw.log*
Check if logs are being sent to the Security Management Server.
Also, when box was rebooted, when we logged into dashboard, gave warning that /va/log needed at least 2 GB free space and it was 1.5 at the moment and there was only 1 file we could delete bigger than 100 MB
Unless someone else has different suggestion, I think this would need to be rebuilt and more space assigned to /var/log dir
Also, since lvm_manager cant run to resize directory unless in maintenance mode, not sure if there is an easy way to do this in vmware, but if there is a way and can be resized, Im pretty sure that would fix this issue without having to rebuild.