Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Matlu
Advisor

Automatic deletion of logs.

Hello,

What is the best way to "determine" if my SMS is deleting my oldest logs?

What we want to know is, if we can have a control over the logs, to avoid that the path where the logs are stored, fill up and saturate the SMS disk.

How many days by default does an SMS store logs when it has a Cluster attached to it?

Greetings.

0 Kudos
4 Replies
Chris_Atkinson
Employee Employee
Employee

Options exist within SmartConsole to control retention behavior, typically this is based on remaining space metrics either capacity threshold or percentage based.

Other metrics aren't so uniform and might vary significantly from one environment to the next based on logging rates / volume of managed gateways etc

CCSM R77/R80/ELITE
0 Kudos
Matlu
Advisor

Hello,

I would like to find the oldest logs that are stored in my SMS, and be able to "export" them to an external device.

I understand that the oldest logs, I could see them in the route of
"cd /var/log/opt/CPsuite-R80/fw1/log", right?

We want to find a way, for example, that the SMS only stores the last 30 days of logs, and that after that time, it can "overwrite" them automatically, so that we have control over the storage.

0 Kudos
the_rock
Legend
Legend

Hey bro,

Links @G_W_Albrecht gave are amazing reference.

Best,

Andy

0 Kudos
G_W_Albrecht
Legend
Legend

See https://community.checkpoint.com/t5/General-Topics/Define-log-retention/m-p/54642#M10915 for the settings. Manual check can be perfomed by looking into $FWDIR/log/ directory on Security Management Server.

 

CCSE CCTE CCSM SMB Specialist

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events