Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Explorer

Log localy logs from the clean up rule

Hello,

 

In my system im curently sending logs to a 3rd-party log server, i want to store a logs from the clean-up rule locally.

My goal is to send all logs to a 3-rd party log server but the logs from a clean up rule i would like to store locally and not to send them to  3rd-party log server. How can i achieve it ?

 

Thank you

 

0 Kudos
Reply
1 Reply
Employee++
Employee++

This isn't currently an option. it's definitely an interesting idea.
I'll try to push for such a new feature: to export/not-export logs using the log-exporter on a per rule basis.


You can however use the filtering feature to try to filter-in fields' values matching all you rules (at least close to it), which should leave-out logs matching your clean-up rule.
it may not be so simple, as it heavily depends on how complex your rulebase is.

See log-exporter sk122323 (Filter Configuration section):
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...