The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
SmartEvent NGSE report shows very large (unrealistic) number of sessions when in Application & URL Filtering rule the Track is set to 'Complete Log'
Technical Level
Solution ID
sk102389
Technical Level
Product
SmartEvent / Eventia Analyzer
Version
NGSE (EOL)
OS
Gaia
Platform / Model
Smart-1
Date Created
07-Sep-2014
Last Modified
14-Mar-2016
Symptoms
SmartEvent NGSE report shows very large (unrealistic) number of sessions when in Application & URL Filtering rule the Track is set to 'Complete Log'. For example, for 5 minutes of web browsing on a news site, thousands of sessions are reported. Example:
SmartEvent NGSE report shows correct (expected) number of sessions when in Application & URL Filtering rule the Track is set to 'Extended Log'.
Cause
When in Application & URL Filtering rule the Track is set to 'Complete Log', every single request is logged separately. As a result, each log entry is counted as a separate session.
