Check Point - View and Manage Log Files - Command Reference

List of Check Point commands to view and manage log files.

Command	Description
fw lslogs	View a list of available fw log files and their size.
fwm logexport	Export/display current fw.log to stdout.
fw repairlog <logfile>	Rebuild pointer files for <logfile>.
fw logswitch [-audit]	Copy current (audit) logfile to YY-MM-DD-HHMMSS.log and start a new fw.log.
fw log -c <action>	Show only records with action <action>, e.g. accept, drop, reject etc. Starts from the top of the log, use -t to start a tail at the end.
fw log -f -t	Tail the actual log file from the end of the log. Without the -t switch it starts from the beginning.
fw log -b <starttime> <endtime>	View today's log entries between <starttime> and <endtime>.
fw fetchlogs -f <file> module	Fetch a logfile from a remote CP module. NOTE: The log will be deleted from the remote module. Does not work with current fw.log.
fwm logexport -i <file> -o out.csv -d ',' -p -n	Export logfile <file> to file out.csv, use , (comma) as delimiter (CSV) and do not resolve services or hostnames (-n).
log list	Show index of available system and error log files.
log show <nr>	View log file number <nr> from the log list index.