- Products
- Learn
- Local User Groups
- Partners
- More
What's New in R82.10?
10 December @ 5pm CET / 11am ET
Improve Your Security Posture with
Threat Prevention and Policy Insights
Overlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hi,
Have a plan to change the indexed log setting of MLM R80.40 from 14 days to 30 days.. I have never done this changes, though it looks quite simple, i just need confirmation on couple of items.
Does it require install database to apply these setting on CLM ?
Does it require any restart like smartconsole or anyother services ?
Did we encounter any performance issue if we increase the indexed logs to 30 days (currently, no performance issue) ?
As I recall, it requires restarting the various management services to take effect, which should not affect traffic passing through gateways.
The system will be using more resources while the extra logs are indexed, but it's primarily done at lower priority so if something else requires the system's attention, the reindexing task will be de-prioritized.
Once the reindexing is complete, resource usage should return to normal.
Hi,
Thanks, i understood from the system resource point of view. I still need to understand exactly what are the services needs to be restarted though no impact to users traffic. As we have a strict change process, we have to list all the steps so can you pls share me relevant SK or document ? If not, a brief about what services should be restarted ? Thank you
sk164054: Daily logs retention policy configuration instructions
sk117317: How to configure log/Indexes maintenance policy for Global SmartEvent and MDS
Restarting by
mdsstop
mdsstart
The services that need to be restarted are on the management, and it looks like all of them, given we're talking about a cpstop/mdsstop.
Assuming gateways log to the management server, the only impact to the gateways is they will temporarily log to the local system.
Once management comes back up, these logs will flow back to the management automatically.
Thanks all for the clarification. I will plan the activity in the next weekend and post you incase if i do face any problems. thanks again
Hi,
We changed the indexed log setting from 14 to 30days on MLM a few days back and followed by mdsstop;mdsstart on MLM.
But the new setting has reflected only at MLM level and not at CLM. Each log servers within the domain is still showing as 14 days. This week, we are planning to restart the services on both primary/backup MDS servers.
Can you please confirm if something else is required here ? Thanks in advance.
I assume a similar change would have to be made on each log server as each log server indexes.
Hi,
All the domain log servers are set to inherit the settings from MLM servers. Hence, i am suspecting reloading each log server may not required here. We will try to restart mds services on both primary/secondary MDS and if that doesn't help then probably will have to open a case. If you guys know the details, please share me. Thank you
Hey,
Once you change the maintenance / log retention configuration, there is a need of "publish" operation on MDS/MLM domain and "install database" on CLA/CLM level.
Once its done, FWD process is reloaded.
No impact on performance or restart / reboot of anything else.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 26 | |
| 19 | |
| 10 | |
| 8 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 4 | |
| 4 |
Wed 03 Dec 2025 @ 10:00 AM (COT)
Última Sesión del Año – CheckMates LATAM: ERM & TEM con ExpertosThu 04 Dec 2025 @ 12:30 PM (SGT)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APACThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasWed 03 Dec 2025 @ 10:00 AM (COT)
Última Sesión del Año – CheckMates LATAM: ERM & TEM con ExpertosThu 04 Dec 2025 @ 12:30 PM (SGT)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APACThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY