> Source: [sk153172](https://support.checkpoint.com/results/sk/sk153172)

# sk153172 - Indexing delays of up to 30+ minutes

| Property | Value |
|----------|-------|
| Solution ID | sk153172 |
| Date Created | 2019-05-21 |
| Last Modified | 2019-05-23 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R82.x, R82.20 |
| OS | Gaia |

## Symptoms

- Constant indexing delays (30+ minutes), although SmartView Tracker does not show any delays in logs.

## Solution

1. Run: \[Expert@xxxxx001:0\]# CPLogInvestigator -a -p \> /var/log/CPLogInvestigator.txt  

2. Find the Product log statistics (Per Day)   

   Example:   

   - Anti Malware : 31360  
   - Application Control : 231029973  
   - New Anti Virus : 26240  
   - SmartDefense : 2747733  
   - Threat Emulation : 885973  
   - URL Filtering : 429621760  
   - VPN-1 \& FireWall-1 : 1827009493

<br />

The recommended relation is that APP/URL logs get 5% of FW logs, in the case indexing delays the value was around 25%.After investigating Application control policy and there were various rules that configured to track logs as "Complete Log" that create log per every URL

<br />

**Log** - Records the event details in SmartView Tracker. This option is useful to get general information on your network traffic. It consolidates logs by session (there is one log for each session). It shows the initial URL browsed and the number of suppressed logs it includes.

**Extended Log** - Consolidates logs by session, shows the number of suppressed logs and includes data for each URL request in the session time frame. Each of the URLs has an entry in the URLs tab of the log in SmartView Tracker. Using this option can have an effect on performance

**Complete Log** - Records logs for each URL request made regardless of session. Each URL request has its own log. This option also generates an event in SmartEvent for each URL browsed and is intended only for troubleshooting purposes. Note that this option generates many logs.

Reduced number of logs by changing Application control policy. Change the log tracking of high hit rules from "Completed" to "Log"

<br />

Also change the threads number in *smartlog_settings.conf* file to optimize indexing process.

*:num_pre_index_threads (4)*   
*:num_index_threads (8)*

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content