The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Endpoint Security Server Forward Compatibility - Updating Log Schema Files
Endpoint Security Server, Endpoint Security Client
R77.20 (EOL), R77.30 (EOL), R77.30.01 (EOL), E80.62 (EOL), E80.64 (EOL), R77.30.02 (EOL), E80.65 (EOL), R77.30.03 (EOL), E80.70 (EOL), R80.10 (EOL), E80.71 (EOL), E80.72 (EOL), E80.80 (EOL), E80.81 (EOL), E80.82 (EOL), E80.87 (EOL), E80.88 (EOL), E80.89 (EOL), E80.90 (EOL)
Platform / Model
No logs in SmartLog, or in SmartView Tracker, will be displayed from E80.87 Endpoint Security Client when connected to the following Endpoint Security Servers:
R77.30 EP6.5 No logs in SmartLog, or in SmartView Tracker, will be displayed from E80.64/E80.65/E80.70/E80.71/E80.72/E80.80/E80.81/E80.82/E80.83/E80.84/E80.85/E80.86/E80.88/E80.89/E80.90 Endpoint Security Client when connected to the following Endpoint Security Servers:
New Event Log schema is missing.
This issue was fixed. The fix is included in:
Check Point recommends to always upgrade to
the most recent version.
For other versions, download and apply the New Event Log schema on Endpoint Security Server: Hotfix for Endpoint Security Server Forward Compatibility
Hotfix Installation Instructions
On Gaia OS:
Check_Point_Hotfix_Gaia_sk106662.tgz file from the above table. Copy the file to any folder on the Endpoint Security Server.
The TGZ file contains a script file and another TGZ file. Extract them in CLI:
[Expert@HostName:0]# gtar -zxvf Check_Point_Hotfix_Gaia_sk106662.tgz Set execution permissions:
[Expert@HostName:0]# chmod 777 update_log_schema_repository Execute the script:
[Expert@HostName:0]# ./update_log_schema_repository log_schema_repository.tgz
On Windows OS:
Check_Point_Hotfix_Win_sk106662.cab file from the above table. Copy the CAB file to any folder on the drive where Endpoint Security Server is installed.
The CAB file contains a script file and another CAB file. Extract them.
Execute the script in Windows Command Prompt:
C:\> update_log_schema_repository.bat log_schema_repository.cab Important Note: Confirm the letter of the drive is in upper case (e.g., C:\, and NOT c:\)
This script must be applied on all Endpoint Security Servers, and all Policy Servers.
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.