Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rui_Pereira1
Participant
Participant

Cpview history export date window

Hi,

 

In R80.10, the cpview history export collects data for the last 30 days.

In R80.30, the cpivew export only has the past 7 days.

With R80.30, is there anyway to have the last 30 days on the cpview export?

 

Thanks

0 Kudos
4 Replies
Noam
Employee Alumnus
Employee Alumnus

cpview export should export all data in R80.30. if you see only 7 days it could be due to lack of memory or other reasons..

do you see the full month when running cpview -t?

0 Kudos
Rui_Pereira1
Participant
Participant

I see some minutes in difference the export goes some more minutes in the past than cpview -t.

I assume it is because cpview -t was done some minutes after the export.

So I consider cpview -t has the same time window as cpview export.

I'm not able to see a full month on cpview -t.

I've done the export some minutes ago on a cluster and active unit has 7 days and 9 hours, stand-by unit has 9 days and 15 hours.

Also disk is not a problem since all partitions have free space, /var/log has almost 70G free space.

Memory should not be a problem, each unit has 16GB and more than half is free.

CPU could be an issue, because I see some spikes during the day, but it is only on the main unit, not the stand-by.

And last failover was on July 15, and last reboot was before that. 

0 Kudos
Noam
Employee Alumnus
Employee Alumnus

sorry, it's hard to tell what happened... looks like now everything is working ok

it could be that cpview history daemon (cpview_services) was off for awhile or some change in cpview history db

you can contact Check Point support or wait to see if the problem persists

0 Kudos
Rui_Pereira1
Participant
Participant

TAC detected an issue and a specific HF was provided.

After HF install, cpview is recovering the 30-day window.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events