From Smart-1 Cloud via API

[TSOL]

Hello experts,

We’re using Check Point Smart-1 Cloud and would like to integrate it with our internal analysis system.

Specifically, I’d like to know:

1. Is it possible to pull Traffic and Security logs (e.g., via API for Logs) from Smart-1 Cloud?

2. If so, what are the limitations in terms of:

   • Number of logs per request or pagination limit

   • Time period that can be queried (how far back I can go)

   • Total volume or rate limits (daily/monthly, etc.)

3. Are there any differences compared to on-premise Management API (e.g., show-logs endpoint)?

I’ve checked the official documentation and data sheets:

• Smart-1 Cloud Admin Guide (no clear mention of API for Logs)

• Logging & Monitoring API (mentions 100 logs per page for on-prem R81)

• Smart-1 Cloud Data Sheet (mentions 5 GB/day and 200 GB log storage for 5 gateways)

Thanks in advance!

[Chris_Atkinson · Accepted solution]

Note for awareness there is a specific log export add-on license outlined on the datasheet for Smart-1 Cloud.

Your local SE is probably best placed to help validate how this applies to your case versus typical log export to SIEM.

[Dmitrie_Shaiman · Accepted solution]

The information in the official documentation and data sheets is correct and reflects the current behavior of the platform.

All commands listed in the Management API Reference, including show logs, are supported in Smart-1 Cloud, just like in on-premises management.

You can also find useful examples in the Smart-1 Cloud Administration Guide, which show how to use the API and help to run different commands effectively.

[the_rock]

I agree with what the guys said. I would also add might be worth open TAC case to get an official confirmation if needed.