Set default query timeframe

[Henrik_Noerr1]

I am trying to set the default query time frame to 24h from 7 days in SmartLog and the 'View rule log' functionality.

This can be set manually by each user in Smartlog, but I cannot find a central way to do this. The change is saved in \\AppData\Local\Check Point\SmartConsole\R80.10\UserSettings\<USER>\<DomainIP>\<DomainName>

I guess one way would be to control this with a GPO - But I would much rather be able to control this from the MDS/MLM

I know of the user_settings.xml file on the MDS - Perhaps this can be expanded? I cannot find any documentation on this.

The reason for all of this is simply to lessen the load on the system, with +50 admins browsing rulesets, and querying SmartLog directly. Furthermore, a 24h default is much more practical IMO.

Any thoughts?

/Henrik

[G_W_Albrecht]

https://community.checkpoint.com/thread/11671-can-the-default-be-changed-for-the-logging-time-period... 

[Don_Lloyd]

I too am interested in this - it takes FOREVER to load up the 7 days... when what I'm looking for is almost always in the previous 24h.