> Source: [sk122814](https://support.checkpoint.com/results/sk/sk122814)

# sk122814 - Logs show incorrect or missing user information

| Property | Value |
|----------|-------|
| Solution ID | sk122814 |
| Date Created | 2018-02-12 |
| Last Modified | 2018-05-08 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * User information is missing from logs.
* User information is incorrect in the logs.

## Cause

Both the Security Management/Log Server and the Security Gateway are configured with Identity Awareness.

When a user is identified on the Security Gateway, the Security Gateway inserts the user information in the logs.

When the logs arrive at the Security Management, the Security Management attempts to resolve the IP address to a user according to the Identity Awareness setting on the Security Management. The Security Management then inserts this information into the log, overriding the user information that was provided by the Security Gateway.

**If the user information provided to the Security Management is different than the user information provided to the Security Gateway, this issue occurs.**

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content