What is different between system logging on web UI and log exporter on CLI and SmartConsole

[Adity12]

Hi all,

i have question about what is different tools system logging on web UI and log exporter on CLI and SmartConsole?

Do the two tools has same the function or different.

Thanks Regards

Dio Aditya Pradana

[G_W_Albrecht]

Easy: System Logging sends Log entries in syslog format to a syslog server. But Log Exporter supports:

• SIEM applications: Splunk, LogRhythm, Arcsight, RSA, QRadar, McAfee, rsyslog, ng-syslog, and any other SIEM application that can run a Syslog agent.
• Protocols: Syslog over TCP, Syslog over UDP.
• Formats: Syslog, Splunk, CEF, LEEF, Generic, JSON, LogRhythm, RSA.
• Security: Mutual authentication TLS 1.2.
• Log Types: The ability to export Security logs, Audit logs, or both.
  Note: Audit logs exist on both the Management Server and the Log Server.
• Filtering: Choose what to export based on field values. Filter out (do not export) Security Gateway connection logs.
• Links to Logs and Log Attachments: Export links to the relevant log card in SmartView and to the log attachments.

[Adity12]

Thanks @G_W_Albrecht for expalanation.

Btw thats on my lab, currently i using R81.10 and configure just in smartconsole.

But if i want use R80.20 take 101, i see on smartconsole there is no menu for export so if i want export i must configure with CLI right?

[G_W_Albrecht]

Yes. sk122323: Log Exporter - Check Point Log Export

[Adity12]

Thanks @G_W_Albrecht