The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Configuring a Log Server to work with both SmartReporter component and an OPSEC LEA server
| Solution ID |
sk34729 |
| Product |
SmartReporter / Eventia Reporter |
| Version |
R77, R77.10, R77.20, R77.30 |
| Date Created |
04-Apr-2008
|
| Last Modified |
05-Dec-2017
|
Symptoms
Attempt to create a new log consolidation in SmartReporter GUI fails with:
Failed to get default parameters from server/database
$RTDIR/log_consolidator_engine/log/<IP_Address>/lc_rt.log file shows the following error messages:
[DD MMM HH:MM:SS][LogConsolidator] ### LEA end reason:SIC_FAILURE (SIC problem with the LEA Server)
[DD MMM HH:MM:SS][LogConsolidator] Error:failed to get logs information from log server. There are SIC configuration problems
[DD MMM HH:MM:SS][LogConsolidator] Check that:
1) The file $FWDIR/conf/fwopsec.conf contains no rows that refer to lea_server.
2) The file $CPDIR/conf/sic_policy.conf was not modified in a way that would block LEA connections from the log consolidator to SmartCenter or Log server.
[20 Feb 9:25:08][LogConsolidator] Error: failed to run log_consolidator -L .
Solution
|
Note: To view this solution you need to
Sign In
.
|
