The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Security Management Server whose IP was changed does not show logs from the Log Server
Technical Level
Solution ID
sk165994
Technical Level
Product
Quantum Security Management, Logging & Status
Version
R80.30
Date Created
27-Mar-2020
Last Modified
29-Mar-2020
Symptoms
The Security Management Server does not show logs from the Log Server.
(Note: The Security Management Server has changed its IP address recently.)
The output of 'netstat -nap | grep 8211' on the Log Server shows the old IP address of the Security Management Server.
rfl.elg log shows:
2020-03-23 15:42:41,059 ERROR [pool-1-thread-4] com.checkpoint.rfl.solr.monitoring.ServerConnectivityTask.printPingErrorMessage:23 - ping failed for
server. ObjID: [53f41219-647a-4f47-8c08-6403da866c43'], IP Address: [x.x.x.x], Port: [8211], Local IP: [false], Connecting IP Address: [x.x.x.x|
Solution
Do the following:
Look for the IP address of the Security Management Server on the Log Server: [Expert@log_server:0]#cat $RTIDR/conf/logServerConfig.xml
If the IP address is incorrect, run the following command to sync the database: [Expert@log_server:0]#$SMARTLOGDIR/smartlog_server -Autoconf
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.
Give us Feedback
Thanks for your feedback!
Are you sure you want to rate this stars?