Create a Post
Showing results for 
Search instead for 
Did you mean: 

Set default query timeframe

I am trying to set the default query time frame to 24h from 7 days in SmartLog and the 'View rule log' functionality.

This can be set manually by each user in Smartlog, but I cannot find a central way to do this. The change is saved in \\AppData\Local\Check Point\SmartConsole\R80.10\UserSettings\<USER>\<DomainIP>\<DomainName>

I guess one way would be to control this with a GPO - But I would much rather be able to control this from the MDS/MLM

I know of the user_settings.xml file on the MDS - Perhaps this can be expanded? I cannot find any documentation on this.

The reason for all of this is simply to lessen the load on the system, with +50 admins browsing rulesets, and querying SmartLog directly. Furthermore, a 24h default is much more practical IMO.

Any thoughts?


2 Replies
Legend Legend


I too am interested in this - it takes FOREVER to load up the 7 days... when what I'm looking for is almost always in the previous 24h.

0 Kudos


Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events