Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Nathan_Jacobs
Explorer

Can the default be changed for the logging time period results?

I haven't been able to find a setting anywhere, but when I was at CPX one of the CP engineers swore there was a setting to customize a default time period used when users launch logs in R80.10. As it stands today the default is set to 7 days, and we have seen a hit in performance with the expansion of user access. Realistically most of them would only need "Last hour" for troubleshooting purposes. I haven't been able to find the answer in CP documentation so any input is appreciated. Cheers!

13 Replies
ED
Advisor

I also wish that it was easy to change to "Last hour" instead of 7 days. As usually when I need to see logs it's something that I'm currently troubleshooting and then last hour what I need. 

You can close your SmartConsole and take a look in C:\Program Files (x86)\CheckPoint\SmartConsole\R80.10\PROGRAM at the SmartConsole.exe.config file. Maybe it's possible to change the value there. Haven't tried myself. 

0 Kudos
G_W_Albrecht
Legend
Legend

Easy, just open the menue and select Tools > Query Settings:

Now choose, name what you want:

Add a new log tab and enjoy  !

CCSE CCTE CCSM SMB Specialist
Henrik_Noerr1
Advisor

Not that easy with +40 administrators. This should be done centrally. Not on each endpoint.

/Henrik

0 Kudos
G_W_Albrecht
Legend
Legend

I see no problem with every Admin configuring his own default time span. Even if most of them need only one hour, i would refrain from setting that centrally. But if really needed, you can involve TAC in finding a way to enable that...

CCSE CCTE CCSM SMB Specialist
0 Kudos
Henrik_Noerr1
Advisor

The use case being that telling +40 admins to change various default settings in SMC, I guess 2 people would actually be bothered to change it.

Plus education the same admins for the various features that is user customizable is a pain.

0 Kudos
G_W_Albrecht
Legend
Legend

If they get payed to do their job customization should be self-evident 😉

CCSE CCTE CCSM SMB Specialist
0 Kudos
ED
Advisor

Nice! Just don't put anything in the "Default query" field and it works as you want it Nathan.

0 Kudos
G_W_Albrecht
Legend
Legend

As shown in the screenshot, i did name it 1h, and on new Log tab or Dashboard re-open, Log tab showed Last Hour.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Александр_Дроки

How change default time frame of SmartView ?

0 Kudos
Frank_Faber00
Participant

I have the same question. Our Smartview is quite slow with getting data for de default 7 days, so to start with 1 hour default for anyone loggin in would be nice.

0 Kudos
Timothy_Hall
Champion
Champion

Yes, see my response below about slow startup of new logging tabs and a trick to make them start up like lightning:

https://community.checkpoint.com/t5/Logging-and-Reporting/Disable-Automatic-Log-Search/m-p/82171/hig...

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
Александр_Дроки

Timothy_Hall, thanks but our question about SmartView exactly, that availible on https://sms_ip/smartview/

We olredy opened case in support, and engineer tel us wat this curently not supported and if we actualy need this feature contact through our sales manager to open Feature Request.

You know, how do something with with SmartView exactly?

Frank_Faber00
Participant

Thanks Timothy, but, like below, my question is about SmartView. The SmartConsole setting was indeed also valuable to us.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events