Can the default be changed for the logging time period results?

[Nathan_Jacobs]

I haven't been able to find a setting anywhere, but when I was at CPX one of the CP engineers swore there was a setting to customize a default time period used when users launch logs in R80.10. As it stands today the default is set to 7 days, and we have seen a hit in performance with the expansion of user access. Realistically most of them would only need "Last hour" for troubleshooting purposes. I haven't been able to find the answer in CP documentation so any input is appreciated. Cheers!

[ED]

I also wish that it was easy to change to "Last hour" instead of 7 days. As usually when I need to see logs it's something that I'm currently troubleshooting and then last hour what I need. 

You can close your SmartConsole and take a look in C:\Program Files (x86)\CheckPoint\SmartConsole\R80.10\PROGRAM at the SmartConsole.exe.config file. Maybe it's possible to change the value there. Haven't tried myself. 

[G_W_Albrecht]

Easy, just open the menue and select Tools > Query Settings:

Now choose, name what you want:

Add a new log tab and enjoy  !

[Henrik_Noerr1]

Not that easy with +40 administrators. This should be done centrally. Not on each endpoint.

/Henrik

[G_W_Albrecht]

I see no problem with every Admin configuring his own default time span. Even if most of them need only one hour, i would refrain from setting that centrally. But if really needed, you can involve TAC in finding a way to enable that...

[Henrik_Noerr1]

The use case being that telling +40 admins to change various default settings in SMC, I guess 2 people would actually be bothered to change it.

Plus education the same admins for the various features that is user customizable is a pain.

[G_W_Albrecht]

If they get payed to do their job customization should be self-evident 😉

[ED]

Nice! Just don't put anything in the "Default query" field and it works as you want it Nathan.

[G_W_Albrecht]

As shown in the screenshot, i did name it 1h, and on new Log tab or Dashboard re-open, Log tab showed Last Hour.

[Александр_Дроки]

How change default time frame of SmartView ?

[Frank_Faber00]

I have the same question. Our Smartview is quite slow with getting data for de default 7 days, so to start with 1 hour default for anyone loggin in would be nice.

[Timothy_Hall]

Yes, see my response below about slow startup of new logging tabs and a trick to make them start up like lightning:

https://community.checkpoint.com/t5/Logging-and-Reporting/Disable-Automatic-Log-Search/m-p/82171/hig...

[Александр_Дроки]

Timothy_Hall, thanks but our question about SmartView exactly, that availible on https://sms_ip/smartview/

We olredy opened case in support, and engineer tel us wat this curently not supported and if we actualy need this feature contact through our sales manager to open Feature Request.

You know, how do something with with SmartView exactly?

[Frank_Faber00]

Thanks Timothy, but, like below, my question is about SmartView. The SmartConsole setting was indeed also valuable to us.