The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Configuring a Log Server to work with both SmartReporter component and an OPSEC LEA server
Technical Level
Solution ID
sk34729
Technical Level
Product
SmartReporter / Eventia Reporter
Version
R77, R77.10, R77.20, R77.30
Date Created
04-Apr-2008
Last Modified
05-Dec-2017
Symptoms
Attempt to create a new log consolidation in SmartReporter GUI fails with: Failed to get default parameters from server/database
$RTDIR/log_consolidator_engine/log/<IP_Address>/lc_rt.log file shows the following error messages:
[DD MMM HH:MM:SS][LogConsolidator] ### LEA end reason:SIC_FAILURE (SIC problem with the LEA Server) [DD MMM HH:MM:SS][LogConsolidator] Error:failed to get logs information from log server. There are SIC configuration problems [DD MMM HH:MM:SS][LogConsolidator] Check that: 1) The file $FWDIR/conf/fwopsec.conf contains no rows that refer to lea_server. 2) The file $CPDIR/conf/sic_policy.conf was not modified in a way that would block LEA connections from the log consolidator to SmartCenter or Log server. [20 Feb 9:25:08][LogConsolidator] Error: failed to run log_consolidator -L .
