Logging and Monitoring Clients

Monitor logs and events using customizable views and reports. Use these GUI clients:

GUI Client	Description
SmartConsole > Logs & Events	Analyze events that occur in your environment with customizable views and reports. The Logs view replaces the SmartView Tracker and SmartLog GUI clients.
SmartView Web Application	It has the same real-time event Record of a security or network incident that is based on one or more logs, and on a customizable set of rules that are defined in the Event Policy. monitoring and analysis views as SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., with the convenience of not having to install a client. Browse to: https://<Server IP>/smartview/, where <Server IP> is IP address of the Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. or SmartEvent Server Dedicated Check Point server with the enabled SmartEvent Software Blade that hosts the events database..
CPView	On Security Gateways, shows the rate of the generated logs. On Management Servers / Log Servers, shows the rate of the received logs, indexed logs, and exported logs. For the information, see sk101878.

These GUI clients are still supported:

GUI Clients	Description
SmartEvent	For initial settings - configure the SmartEvent Correlation Unit SmartEvent software component on a SmartEvent Server that analyzes logs and detects events., Log Server Dedicated Check Point server that runs Check Point software to store and process logs., Domains and Internal Network Computers and resources protected by the Firewall and accessed by authenticated users.. For the correlation policy (event definitions) For Automatic Reactions
SmartView Monitor	To monitor tunnels To monitor users For suspicious activity rules To monitor alerts - Thresholds configuration For more about monitoring, see Monitoring Traffic and Connections.

SmartView GUI Clients

Administrator access permissions can be limited by the GUI Clients list based on IP address, IP range, a network or a host name.This list is based on the GUI clients' access configuration as defined on the relevant Security Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. or a Multi-Domain Server.

See the R82.10 Security Management Administration Guide > Chapter Managing Administrator Accounts > Section Defining Trusted Clients.

To open the SmartEvent GUI:

1. Open SmartConsole > Logs & Events.

2. Click (+) for a Catalog (new tab).

3. In the External Apps section, click SmartEvent Settings & Policy.

To open the SmartView Monitor GUI:

1. Open SmartConsole > Logs & Events.

2. Click (+) for a Catalog (new tab).

3. In the External Apps section, click Tunnel & User Monitoring.