Support Center > Search Results > SecureKnowledge Details
Log exporter missing value_encapsulation_start symbol Technical Level
Symptoms
  • Log exporter missing value_encapsulation_start value.
  • Correct output: CheckPoint[23750][action: "Drop"; flags:393216"; ifdir: "inbound" ...
  • Incorrect: CheckPoint[23750][action: Drop"; flags:393216"; ifdir:inbound" ...
  • When making a new log exporter configurations, exporter does not work or send logs
  • When making a new log exporter configurations, exporter does not send anything to the target server if filter-blade-in "TP" is configured
Solution

This problem was fixed. The fix is included in:

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:
Refer to sk168597 - How to install a Hotfix.

After the Hotfix is installed, run these commands:


1. [Expert@HostName:0]# cp_log_export reconf

2. [Expert@HostName:0]# cp_log_export restart
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment