CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


I'd like to thank everyone involved for making "The CPUG Challenge" a great success.
We helped a lot of people see and learn a bit more about R80.10, while having some fun.
We will be using this success to try and bring more events to more locations soon. -E

 

Results 1 to 4 of 4

Thread: R80 SmartEvent /var/log > NFS

  1. #1
    Join Date
    2016-05-08
    Posts
    5
    Rep Power
    0

    Default R80 SmartEvent /var/log > NFS

    I'm currently building a SmartEvent Server on R80. First time I've built one and just wondering has anybody ever redirected the /var/log via fstab to an NFS share to allow the logs/event/etc to be stored on our SAN and therefore increasing the amount of logs we can store?

    Doesn't sepcifically have to have been on R80 just GAIA I guess.

    Hope somebody can help.

    Thanks

    Mark.

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,332
    Rep Power
    8

    Default Re: R80 SmartEvent /var/log > NFS

    Quote Originally Posted by oldhamuk View Post
    I'm currently building a SmartEvent Server on R80. First time I've built one and just wondering has anybody ever redirected the /var/log via fstab to an NFS share to allow the logs/event/etc to be stored on our SAN and therefore increasing the amount of logs we can store?

    Doesn't sepcifically have to have been on R80 just GAIA I guess.

    Hope somebody can help.

    Thanks

    Mark.
    I haven't tried it, but i guess the first question is does R80 even ship with the required utilities to mount nfs. My guess is no. iscsi might be a 2nd option to look into with the same question. Of course you'll want to make sure this is even a supported configuration.

    I have a smartevent box i'm using that has 2 fiber channel cards in it. I've got the both postgres and SOL on it right now, but the plan was to split the two. Checkpoint said changing the database location wasn't supported and was untested but that it should work (it did).

    good luck!

  3. #3
    Join Date
    2014-11-14
    Location
    Ottawa Canada
    Posts
    364
    Rep Power
    3

    Default Re: R80 SmartEvent /var/log > NFS

    Quote Originally Posted by oldhamuk View Post
    ...just wondering has anybody ever redirected the /var/log via fstab to an NFS share to allow the logs/event/etc to be stored on our SAN and therefore increasing the amount of logs we can store?
    A - Don't do it! There is SO much Disk I/O, you would need a VERY fast NFS Server and connection, and even then, you will still suffer from performance issues. As per sk66003: "How to change the default storage path for FireWall Log files on Security Management Server":
    "Do NOT place the new log directory on a remote file system. This might result an unpredicted corruptions in active log files (fw.log, fw.adtlog)."

    The better option is to mount the NFS share on it's own partition/directory, and through the use of a script, copy old log files to that share, and remove them from /var/log.

  4. #4
    Join Date
    2016-05-08
    Posts
    5
    Rep Power
    0

    Default Re: R80 SmartEvent /var/log > NFS

    Thanks for the feedback its much appreciated and I'll take it on board and look at 'jdmoore0883' suggestion of using a script to offload old logs from /var/log to a separate NFS share.

    Mark.

Similar Threads

  1. SmartEvent is Not Working
    By anh2lua in forum Licensing
    Replies: 9
    Last Post: 2017-07-04, 01:47
  2. Problem with SmartEvent
    By kjartan.flam.ohr@atea.no in forum SmartDashboard
    Replies: 2
    Last Post: 2013-10-17, 08:58
  3. SmartEvent Error - R76
    By trevino200 in forum Installing And Upgrading
    Replies: 1
    Last Post: 2013-06-05, 10:23
  4. R75.45 SmartEvent Authentication
    By neonavr in forum R75.40 (GAiA)
    Replies: 0
    Last Post: 2012-10-18, 05:03
  5. SmartEvent R70.20 Feedback
    By PhoneBoy in forum Eventia Analyzer/Reporter/SmartView Reporter
    Replies: 2
    Last Post: 2010-03-24, 07:46

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •