Improve company productivity with a Business Account.Sign Up

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 232
  • Last Modified:

Checking point 4.1 log files

I use Checkpoint 4.1 in WinNT
I found that the fw log grow very fast.
it make the log view slow...
Can i create new log file for every day.?

1 Solution
there's a command called "fw logswitch" it creates new log files and saves the old one with a date stamp.

All you need to do is set this up as a scheduled task. On NT this would be done with the AT command. On Unix you couls set it up as a cron job.
there was a little script in the SysAdnmin magazine, june 2001
Not shure if this is what you need.
here is a script you can use, just use notepad, and save as a .bat

fw logswitch

e: being whatever drive you have fw1 on.. then like i said just save as a .bat.. double click it and it will run for you switching the log...

also if you know how to use at commands you can run this automatically

NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

Tim HolmanCommented:
In the rulebase, put in anti-logging rules for broadcast traffic - that is, an additional rule for broadcast services with the logging section kept empty.
You may also want to stop logging internal NetBIOS traffic that hits your firewall, plus routing protocols.
That way, at least your logs are full of relevant stuff !!

- use the "fw logswitch" command and schedule it
- also opent he log viewer -> select options -> and uncheck resolve addresses.

This will turn off the dns on each rule

Hello all,
I am Computer101, a moderator from Experts-Exchange and also an expert within this topic area. This question has been open a long time.  What I am going to do is allow feedback from the questioner and experts.  If it is not resolved, I will delete or accept an answer based on the info I have been given, Experts, feel free to offer input.  I will monitor these questions for a period of 5-7 days and come back and evaluate.  I will have another moderator (who is also an expert in this topic area) look at the question also to ensure we do the right thing for this question.

Thank you
Community Support Moderator
Have you been helped here so you can accept to grade and close, or is more needed?

For special handling help, please post zero point question with question link (URL) here:

Expert recommendations always welcome, if no response from Asker.

EE Moderator
Question(s) below appears to have been abandoned. Your options are:
1. Accept a Comment As Answer (use the button next to the Expert's name).
2. Close the question if the information was not useful to you. You must tell the participants why you wish to do this, and allow for Expert response.
3. Ask Community Support to help split points between participating experts, or just comment here with details and we'll respond with the process.
4. Delete the question. Again, please comment to advise the other participants why you wish to do this.

For special handling needs, please post a zero point question in the link below and include the question QID/link(s) that it regards.
Please click the Help Desk link on the left for Member Guidelines, Member Agreement and the Question/Answer process.  Click you Member Profile to view your question history and keep them all current with updates as the collaboration effort continues, in the event new items have been created since this listing was pulled.

To view your open questions, please click the following link(s) and keep them all current with updates.

To view your locked questions, please click the following link(s) and evaluate the proposed answer.

------------>  EXPERTS:  Please leave any comments regarding this question here on closing recommendations if this item remains inactive another three days.
Thank you everyone.
Moderator @ Experts Exchange

P.S.  For any year 2000 questions, special attention is needed to ensure the first correct response is awarded, since they are not in the comment date order, but rather in Member ID order.
Force-accepted by
CS Moderator
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now