Who rated this post

cancel
Showing results for 
Search instead for 
Did you mean: 
PhoneBoy
Admin
Admin

Not sure why the ROW_START/ROW_END items are there, but they seem to be related to the Unified Policy matching process.
It seems to be expected behavior even on on-SMB gateways (look at example #2 here): https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid... 
To confirm this is expected behavior, a TAC case might be needed.

There are no options to tune what is sent via syslog on SMB appliances, unfortunately.
I don't know the logic used to truncate the logs entries sent via syslog. 

0 Kudos
(1)
Who rated this post