R81 logging issue

[D_TK]

Hi all - 

I have one vm for policy management, and one for smartevent/logging.  upgraded both from r80.40 -> r81.  Both upgrades were error-free, and both are working fine independently. 

The only issue i'm currently having is when I'm connected with dashboard to the policy management vm, i can't view logs from the log server  -  "smartlog is initializing" changes to "smartlog is not active" after a few minutes.  This of course worked fine in 80.40. 

Pointing dashboard directly to the log server works fine for viewing logs, but it's nice to highlight a specific rule and see the logs for only that rule.

I've reset SIC, and installed the database on the log server.

Any thoughts would be appreciated.

thanks.

[Tal_Paz-Fridman]

Hi

Have you tried simply to stop and start the Security Management Server machine?

There are several SKs for this issue, depending on the root cause:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

HTH

Tal

@Dror_Aharony for additional assistance 

[elisz]

Hi @D_TK 

Would you be able to share your solution please to this issue? 
I just happen to have exactly the same problem and can't seem to find a fix. 

Kind Regards,
Eli

[D_TK]

 I applied  JHA 42 for R81 and it resolved the issue. 

[RS_Daniel]

Hello,

It seems to be a bug, i've had the same problem on three differente servers after upgrade to R81. Solution is documented here :

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Regards

[Ido_Shoshana]

R81 JHF T42 should resolve the issue.

[Ido_Shoshana · Accepted solution]

Hi,

The issue is known and Installing R81 JHF T42 should resolve the issue.

[Greg_Harbers]

FYI,

we have just completed an upgrade of the smartcenter server from R80.40 to R81, Mgmt server has JHF  T44, upgrade was an export database, import to new VM, logs servers are still running R80.40 and we had the same issue

following the steps in sk175223 fixed it

[Zocki82]

We've had the same issue and opened a SR.
It was fixed by the procedure mentioned in sk175223.

[Ruan_Kotze]

Have run into this issue a couple of times - sk175223 is now part of my R81 upgrade process notes.

P.S.  Have only seen this when doing in-place upgrade via blink.  Migrations have been issue free.

[Zocki82]

I did a clean R81 installation and imported the old database. The issue occures also in this scenario (did it twice and both times the same issue).