Hi Shira,
First of all I would define auto forwarding logs to MGMT server from the GW object. This will ensure that it will auto-forward logs.
To do it manually, you can use the command "fw fetchlogs <GW IP>" on the MGMT or any log server.
If you can't see the logs after the import of the logs, this might happen because they're no indexed. By default the days to index
on the MGMT is indexing log file that were closed in the last 24 hours. You can change it by using the following link:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Kind regards, Amir Senn