There is a configuration on the gateway / cluster object that determines if locally written logs will be uploaded automatically to the log server. It appears under "Logs => Additional Logging => Log Forwarding Settings".
Turn on the checkbox, select which log server should get the locally logged files and time interval. You can choose to upload in bulk at midnight, or create a new object for uploading every hour. Since local logging can accumulate to a lot of data, choose the interval that makes sense to you in terms of latency of getting the files and whether you only want it to happen in off-hours.
Here's a screenshot of how it looks:
We recommend activating this setting.
If you want to do it in bulk for all your gateways, you can do it via a simple script using the Management API / CLI and the "set simple-gateway" or "set simple-cluster" command: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-simple-gateway~v1.9.1%20
For future versions, we're also looking into making this "on-by-default".
