"The session is invalid or expired" in Smartconsole 80.10 logging

[Libor_Kovar]

Hello, could you help me , pls. ?
Smartconsole 80.10 logging writes me just
"The session is invalid or expired"
Cluster XL used.
Yes I have latest fixes implemented, including Jumbo HFA as of sk111536, where it had to be solved
Many thanks
Btw, is there any other  sensible way to read logs, for example using CLI ? This new Smartconsole style is weird

[Corne_Vorster]

#Your session is invalid or expired, Please try to refresh the view.

Hi

I just applied latest Jumbo Hot fix take 85.

After restart getting "Your session is invalid or expired, Please try to refresh the view."

Logged into both management and event view server , cpstop cpstart , no avail.

Tried to Install Database and checked space on drives , all appears good

Please assist.

Kind Regards

Corne (Nam)

[PhoneBoy]

Since it appears this problem may have been resolved in a hotfix, I recommend you both engage TAC for troubleshooting.

Contact Support | Check Point Software 

Other than SmartConsole, you can view logs in three other ways:

1. SmartView (https://log-server-ip/smartview)

2. fw log on the CLI

3. SmartView Tracker (binaries are still present, but it is formally deprecated/unsupported)

If there is specific functionality missing from SmartConsole that SmartView Tracker has, we are of course interested in the feedback. 

[Libor_Kovar]

Thank you Dameon for you response.

I open the service request , after my firewall  goes to the production, now I am testing it in my closed lab.

Smartview on Web works for me showing logs now, I tried fw log, too,

but I cannot find any Smartview Tracker binary in my Smartconsole 80.10 directories.

As to the functionality missing, sure I'll  let know after more experiences, at the moment I am still trying to swallow this new skin.

For now:

- Log filtering seems to me as poor as on web based standalone appliances, that's  why I long for the Smartview Tracker.

- Log Switch / Purge option  is another big thing I am missing from SmartConsole, that SmartView Tracker has. (I  am aware of the CMD line variant.)

[PhoneBoy]

You can find the SmartView Tracker binary in C:\Program Files (x86)\CheckPoint\SmartConsole\R80.10\PROGRAM as CPlgv.exe

The log filtering works a bit different in SmartConsole...it's designed more like a Google search than, say, filtering on specific fields.

That said, you can actually do that through search queries.

Since logs across multiple files can be seen/searched at once (something SmartView Tracker does not do), the (perceived) need for a logswitch is less.

Also, a logswitch happens every night at midnight automatically.

Purging logs is not something you'd do in a production environment often, though I could see doing it in the lab.

My guess is that this is the reason this was removed, though obviously you can do both (logswitch and purge) from the CLI.

[Corne_Vorster]

My Problem was resolved by:

It Turn out my problem was due to checkpoint Management Host "enable Log Indexing was untick-ed.

Must have been a finger tumble.

[Libor_Kovar]

Unfortunately, it is not my case. I checked before, it is enabled.

Thanks for reply

[Jose_David_Espi]

Hi 

For Solve a problem

1- In the properties of the Management, I check Enable Log Indexing

2- I Install the Jumbo Hotfix Take 91.

3- Reboot Appliance 

Regards

Jose David Espinel 

[Libor_Kovar]

Thanks, it helped

[Jose_David_Espi · Accepted solution]

Hi 

For Solve a problem

1- In the properties of the Management, I check Enable Log Indexing

2- I Install the Jumbo Hotfix Take 91.

3- Reboot Appliance 

Regards

Jose David Espinel