This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have one, create one now for free!
Arskaz
Participant
‎2021-01-27 12:59 AM

cp_log_export filters stopped working at some of latest R80.30 JHF

Hi!

We are using log_exporter to forward only "TP" events to siem. 

At some undefined point, latest log_exporter stopped working, when TP-filter is defined.

Some cmas still have the original log_exporter binary and they work fine.

After searching differences in target definitions, nothing found. The only difference was the log_exporter binary.

So, replaced the newer log_exporter binary with older one... IT WORKED!

So, I bet, there is a bug at least at R80.30 JHF 226.

Colleague is creating a case via support, I came this way...We'll see which way is faster to resolve this 😉

 

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin
‎2021-01-27 07:09 PM

Nice you found a workaround but this is ultimately a bug that needs to be addressed through TAC.

0 Kudos