auditlog Revisions in SMS

[Ayoub_Bou]

Hello guys,

Since we upgraded to R80.30 in our management server , i cant see auditlogs on revisions , is this normal ?

[Maarten_Sjouw]

Since R80 the audit logs roll over every midnight, this is hardcoded and cannot be changed. (At least that was the last I have seen about it in R80.20)

[Ayoub_Bou]

hey , thanks for your reply , in R80.20 i was able to see changes made in the day and many days before also .

[Maarten_Sjouw]

That is due to the fact that in Smartlog you do not care about in which file it is.
When you do a migration from one box to another with a clean install you need to keep in mind that by default your audit log files are not copied, so you need to do that manually.

[Ayoub_Bou]

This was a cpuse upgrade in the same VM , not a clean install

[Ayoub_Bou]

does someone have an idea 🙂 

[Martin_Raska]

I would like to know that also, we have the customer, they upgraded R81.10 via CPUSE and revisions are gone. They claims that also auditlogs are missing, they should be kept right? Maybe indexes are not ready yet?

[Miri_Ofir]

If you upgraded to R81.10 from R80.x, this is probably the solution for you -

https://community.checkpoint.com/t5/Management/Cannot-view-previous-logs-after-upgrade-to-R81/td-p/1...