Evantia Reporter - consolidation error

[lbraid]

When I try and create a cosildation session with log server a get the follwoing error:
Failed to get log files list from server/database?

I've reset the SIC and still same error.

Regards

Lee

[enrique]

Ibraid:
I have the same issue with an Eventia Reporter and I don't know how to resolve it. I post more info about this issue. The same error message appears when I try to create a new Consolidation Session. The next steps are followed to create it, but it doesn't work:
1 - Click in "Consolidation" in the Management tab
2 - Click "Create new ..." to create a New consolidation Session
3 - Select the Log Server
4 - Select one of the two options
After that, a windows error message appears with the same message:

Failed to get log files list from server/database

There is no consolidation session and it is not possible to create Reports. The message "No relevant data found" appears in "Activity log" and create a new SIC doesn't solve the issue.
I would like to know more experience with this issue of other Check Point admins.

[lodown]

There are a few things I have tried that have resolved this issue:

1. Install the database to any log/mgt servers and wait a bit(could be up to 24 hours in some cases)

2. Wait a little while. I have had sessions that were running that all of a sudden would give me the same error. After a few hours it would work again.

3. There is a procedure to change connection between Eventia and the log server to unencrypted. In the sic_policy.conf on the Eventia server, change the log server communication type from sslca to ANY. Unfortunately I don't have a SPLAT machine at my disposal, so hopefully someone can find the exact line that needs to be changed.

-lodown

[jspeliers]

We are currently dealing with the same issue. A few things that we had to do:
1) make sure you have HFA-02 installed on the reporter server
2) we were provided by Checkpoint with a post HFA-02 fixes: HF001 and hf232. Make sure to confirm install as we had some quirks getting these in.
3)make sure you install HFA-01 of the Smartconsole gui

After all this it fixed a few things but we did get an instance when the consolidators "went to sleep". Our case is still open and further troubleshooting is being done.

[phoenix_ikki]

Originally Posted by lbraid

When I try and create a cosildation session with log server a get the follwoing error:
Failed to get log files list from server/database?

I've reset the SIC and still same error.

Regards

Lee

This problem occurs serveral times and so far the CP support is unable to find the root cause. The problem is always resolved by re-installing the Eventia Reporter (and restore the backup database).

[imslickrick2k]

i have this problem also... i came up with a workaround which was to run the log consolidator manually from the command line on the Eventia box..

(on solaris)
./log_consolidator -R &

This starts the consolidator and i can create reports.. Only thing is that in Eventia Reporter client you still won't be able to create a new consolidation session, but it's already running from the CLI from the above command.