File size limitation when exporting fw.log with CPlgv

[saitoh]

Hi all,

My boss says there might be file size limitation for SmartViewTracker to export fw.log.

I have been seeking for the documents which describes that limitation, only to find nothing.

I know it is not common to use the CPlgv because of other measures to retrieve logs: SmartView.

However our customer whose GAiA is R80.10 is not willing to change their routine of storing logs.

SmartView is quicker and easier I think, but they want to stick to the old.

That is why I need to check the existence of limitation.

Any comments would be more than welcome. Thanks!

Saitoh

[G_W_Albrecht · Accepted solution]

R80.10 is completely out of support since January 2022 !

fw.log is switched, so you have to export a number of times. see sk21398: FireWall log switch is performed automatically when log file size reaches 2 GB

For 80.10 a size limit is found here: https://support.checkpoint.com/results/sk/sk65298

[saitoh]

Hi @G_W_Albrecht ,

Thank you for providing me with documents!

I forgot about the rotation of log file... I should have figured it out myself.

My understanding is: Due to that design fw.log is never larger than 2GB, so we do not have to talk about how large file CPlgv can handle.

Saitoh

[G_W_Albrecht]

Yes.

[PhoneBoy · Accepted solution]

From R80, the management will create a new log file every day at midnight OR when the log file reaches ~2GB.
SmartView Tracker (and SmartView without indexing) can only view (and thus export from) one log file at a time.
I assume the limit is 2GB as documented here: https://support.checkpoint.com/results/sk/sk65298 

However, R80.10 was released in 2017 and has been End of Support for at least two years.
It's highly recommended your customer upgrades to a supported release.

[saitoh]

Hi @PhoneBoy ,

Thanks for your comment!

Come to think of it, you are right... I forgot that a log file is rotated on the condition.

Saitoh