SmartConsole Rule Logs - Display Issue

[B_P]

Anyone else get this display issue where the results won't actually show? I think I've had this issue since R80.00 EA and across multiple computers / installs. It happens randomly and on both Logs and History. Only way to fix is to close out of SmartConsole and re-open.

For the record, this is what it should look like:

From my own testing, it could have something to do with with the fact that I habitually minimize the other side-panes in the Log & Monitors view like Objects, Validations on the right side and URLs and Files on the bottom. So I open SmartConsole, open a Logs tab, immediately minimize all the auxiliary panels, view some logs, then at some later point click on a firewall rule and try to view the rule logs, then this happens. But if I open SmartConsole, go to a rule and view its logs first, then it doesn't seem to matter if I later view logs under Logs & Monitor and come back to view a rule log, it still works.

???

[the_rock]

I seen this issue with smart-1 cloud instance back in R80.40, but since CP upgraded it to R81.10 few months ago, never happened since. Whats mgmt version you are on currently?

[B_P]

Mgmt R81.10 T78

SmartConsole 81.10.9600.410

[the_rock]

Then Im not sure, sorry. You can check with TAC, but I have a feeling they would probably ask to debug smart console directly from the gui...just my educated guess.

[Chris_Atkinson]

Out of interest do you use default display scaling or a different value?

[B_P]

Default / 100%, primarily on a 1920x1200 (16:10) monitor.

[PhoneBoy]

SmartView is probably a better way to go here: https://mgmt-ip/smartview

[B_P]

While I applaud the efforts of SmartView web, it's not ready for prime-time. Losing your view position in the access policy when viewing logs makes SmartView web a hard pass for me. There's not even a jump-to-rule feature yet (or any searching for that matter).

[Tomer_Noy]

Have you tried to use the Web SmartConsole?

It's available starting from R81 and reachable from https://<management>/smartconsole

It includes many aspects of policy management (not all yet), plus it embeds smartview in context of the policy. You can see the attached example from my lab machine with the log view below the policy.

Does that answer the context that you wanted for viewing logs with the policy?

[George_Ellis]

Too add to B_P's comment.  SmartView is SmartEvent centric and if you don't have SmartEvent...

[George_Ellis]

So, you are not crazy.  One of our guys was showing the same behavior this week.  And as you are aware, 410 does not solve it.  I think a focus change (windows focus) may have populated it, but not reliably.  

[B_P]

A year later.................

[Amir_Senn]

Is your log server indexing the logs?

Version and JHF take?

[B_P]

Yes it's indexing.

Mgmt R81.20 Jumbo Hotfix Take 53

SmartConsole 81.20.9700.653

[B_P]

Mgmt R81.20 Jumbo Hotfix Take 53

SmartConsole 81.20.9700.653

[PSushko]

I was scrolling through this thread hoping that someone had a solution to this, and then I see this comment from yesterday a take ahead of me... guess no fix yet lol.

[CaseyB]

It also never works for me, but funny enough, it works for my co-worker. I just forget the feature is there.

R81.10 JHF 141

[nicolasr]

Hi, can you tell please, Version installed and Jumbo? thanks!

[B_P]

Since what I stated above, we've upgraded and are now on

Mgmt R81.20 Jumbo Hotfix Take 53

SmartConsole 81.20.9700.653

[B_P]

Since what I stated above, we've upgraded and are now on

Mgmt R81.20 Jumbo Hotfix Take 53

SmartConsole 81.20.9700.653

[Georgios]

Hello,

We also have the same problem:

Management Server: R81.20 Gaia Kernel Version: 3.10

SmartConsole: Version R81.20 / 81.20.9700.651

[the_rock]

Did you try cpstop; cpstart or reboot the mgmt?

Best,

Andy

[Georgios]

Hello,

For sure this is not a mgmt issue because we recently upgraded  our mgmt server from version 81.10 to 81.20.

We opened a support ticket to CheckPoint and we are waiting their response... I will let you know.

[the_rock]

It would logically appear it would be something on mgmt server, since it involves the log file. Did you check the indexing? I upgraded mgmt from R81.10 to R81.20 many times and never had this problem.

Best,

Andy

[Georgios]

The only way to fix temporary the problem is to close and open again the SmartConsole. We also have the same issue to other computers running SmartConsole. 

[the_rock]

Thats why I mentioned trying cpstop; cpstart or rebooting the mgmt would make sense. But, just my personal opinion...thats first thing I would do if I had that issue.

Best,

Andy

[B_P]

---

@B_P wrote

I've had this issue since R80.00 EA

---

☝️

[B_P]

Still happening on R81.20. Full version;

Mgmt R81.20 Jumbo Hotfix Take 53

SmartConsole 81.20.9700.653

[B_P]

Still happening on R81.20. Full version;

Mgmt R81.20 Jumbo Hotfix Take 53

SmartConsole 81.20.9700.653

[the_rock]

Agree. Just tested in in R81.10, also R81.20, exact same issue. I really think this should be fixed.

Andy

[B_P]

Still an issue on R82. This even happens when I remote desktop into other computers:

[the_rock]

I can also confirm thats the case, I see the same in my R82 lab. Tried rebooting, tested many rules, no difference.

Andy

[Georgios]

Hello,

Very good news from TAC, they found the bug and they provided a custom build of SmartConsole that solves the problem. I suppose that the fix will be included in the next SmartConsole release. 

Regards