could not see the logs after upgrade mgmt server R80.20 to R80.40

[kdeiyagala]

hi,

I have upgraded the checkpoint MGMT server and 2 GWs to R80.20 to R80.40.

After the upgrade I could not see previous logs (R80.20) logs. but I could see the logs after the upgrade. 

Checkpoint support advised to follow the deindex SKs. But still having the same issue. 

Worked with 3 checkpoint tech, but they could not figure it out.

I can open the logs manually beside the log search bar file -->open log file.

It would be grate if someone can assist me.  

Thank you.

[PhoneBoy]

What is the precise procedure you followed?
Was it this one?
https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eve...

If that one doesn’t work, you will need to get the TAC involved to understand why it’s not.

[the_rock]

I thought that was normal, but I could be wrong. I will see if I can test this in the lab. What sk's did TAC provide?

Andy

[Liat_Cihan]

Hello kdeiyagala,

I am sorry to hear about your bad experience.

We will contact you offline and will try to assist 

[the_rock]

Keep us posted what happens. I replicated this in the lab and did not experience same problem, all logs are still there.

[kdeiyagala]

Thx for all the comments and suggestions. 

however old log files moved to var/log/opt/CPrt-R80.20/Log_indexes folder after the re indexing.

it is working fine move the Log_indexes file to CPrt-R80.40. 

had to run evestop, evstart and install database after copy the file.

Thx.

[Liat_Cihan]

I am happy to hear everything worked up fine. 

Liat