Tracking Growth in Rules or Logs Over Time in Reports

[Patrick150781]

Hello Check Point Community,

I am looking for a way to track changes over time in a report, specifically an increase in the number of firewall rules or logs. Ideally, I would like to generate a report that visualizes how these numbers evolve over a given period.

Does anyone know if there is a built-in feature in SmartEvent, SmartView, or another Check Point tool that can provide this kind of historical trend analysis? Alternatively, are there any recommended workarounds, such as exporting data periodically and analyzing it externally?

Any insights or suggestions would be highly appreciated!

Thanks in advance!

Best regards,

Patrick

[Tal_Paz-Fridman]

I would start with the predefined SmartEvent View called Audit Overview

It has section for Objects and Rules

You can generate periodically and export it to run further queries

[Tal_Paz-Fridman]

Another more manual option would be to export the rulebase periodically - from SmartConsole or using API and use the date to find the changes

And another option is to produce a Changes Report between sessions - SmartConsole > Manage & Settings > Sessions > View Revisions - select and apply - Actions > Changes 

[Amir_Senn]

I have also created a custom SmartView report: https://community.checkpoint.com/t5/SmartEvent/Rules-and-Operations-view/m-p/135810#M30

Maybe it can help provide additional info.

[PhoneBoy]

For log sizing, you might try the Doctor Log script mentioned here: https://support.checkpoint.com/results/sk/sk181782