The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Configuring a Log Server to work with both SmartReporter component and an OPSEC LEA server
Technical Level
Solution ID
sk34729
Technical Level
Product
SmartReporter
Version
R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL)
Date Created
04-Apr-2008
Last Modified
05-Dec-2017
Symptoms
Attempt to create a new log consolidation in SmartReporter GUI fails with: Failed to get default parameters from server/database
$RTDIR/log_consolidator_engine/log/<IP_Address>/lc_rt.log file shows the following error messages:
[DD MMM HH:MM:SS][LogConsolidator] ### LEA end reason:SIC_FAILURE (SIC problem with the LEA Server) [DD MMM HH:MM:SS][LogConsolidator] Error:failed to get logs information from log server. There are SIC configuration problems [DD MMM HH:MM:SS][LogConsolidator] Check that: 1) The file $FWDIR/conf/fwopsec.conf contains no rows that refer to lea_server. 2) The file $CPDIR/conf/sic_policy.conf was not modified in a way that would block LEA connections from the log consolidator to SmartCenter or Log server. [20 Feb 9:25:08][LogConsolidator] Error: failed to run log_consolidator -L .
