I am trying to set the default query time frame to 24h from 7 days in SmartLog and the 'View rule log' functionality.
This can be set manually by each user in Smartlog, but I cannot find a central way to do this. The change is saved in \\AppData\Local\Check Point\SmartConsole\R80.10\UserSettings\<USER>\<DomainIP>\<DomainName>
I guess one way would be to control this with a GPO - But I would much rather be able to control this from the MDS/MLM
I know of the user_settings.xml file on the MDS - Perhaps this can be expanded? I cannot find any documentation on this.
The reason for all of this is simply to lessen the load on the system, with +50 admins browsing rulesets, and querying SmartLog directly. Furthermore, a 24h default is much more practical IMO.