Web smartconsole disconnects the Log server

[msurjan]

Hi CP Legends,

Need a little advise in regards to exporting Logs.

We are on 81.20 and devices are in cluster.

Recently we tried to export logs from Smart Console and it said that they can only be exported from Web Smart Console.

When we tried the same from Web Smart Console and after searching for specific query, We started receiving error as "Log Server is disconnected". But when we closed the web smart console, that error went away.

We have noticed this "Log Server disconnected" always appears when we do query on Web smart console.

Is there any solution to this or any alternative to export logs from checkpoint rather than going out to SIEM?

[_Val_]

Could it be that your log server is on another machine? If yes, open WebConsole to that machine directly. 

If this is not the case, I suggest you open a case with TAC: https://help.checkpoint.com

[Tal_Paz-Fridman]

It is not specifically Web SmartConsole which SmartConsole that is accessible through the browser but SmartView Web Application.

To access it go to https://<management>/smartview or https://<log_server>/smartview  

See https://support.checkpoint.com/results/sk/sk118002