Support Center > Search Results > SecureKnowledge Details
SmartEvent stops getting new events Technical Level
Symptoms
  • SmartEvent stops getting new events and the $RTDIR/distrib/ directory of the Correlation Unit fills up with events (contains multiple directories named '{UUID}.db').
Cause

The connection between the Correlation Unit and the SmartEvent server is broken.


Solution

This problem was fixed. The fix is included in:

Check Point recommends to always upgrade to the most recent version.

 

For other versions, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

 

Hotfix installation instructions

  1. Hotfix has to be installed only on the Correlation Unit.

  2. Download the hotfix package:

    Platform R76
    Gaia (TGZ)
    SecurePlatform (TGZ)
    Linux (TGZ)


  3. Transfer the hotfix package to the Correlation Unit (e.g., into /some_path_to_fix/ directory).

  4. Unpack the hotfix package:

    [Expert@HostName]# cd /some_path_to_fix/
    [Expert@HostName]# tar -zxvf ReportingServer_<HOTFIX_NAME>.tgz

  5. Stop all Check Point services:

    [Expert@HostName]# cpstop

  6. Install the hotfix package:

    [Expert@HostName]# cd /some_path_to_fix/
    [Expert@HostName]# ./ReportingServer_<HOTFIX_NAME> 

  7. Start all Check Point services:

    [Expert@HostName]# cpstart
This solution is about products that are no longer supported and it will not be updated
Applies To:
  • 01091945 , 01092603 , 01095767 , 01096541 , 01139638 , 01139639 , 01139640 , 01139699 , 01176224 , 01187210 , 01381534 , 01383918

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment