> Source: [sk166493](https://support.checkpoint.com/results/sk/sk166493)

# sk166493 - Cannot see events from Security Management server

| Property | Value |
|----------|-------|
| Solution ID | sk166493 |
| Date Created | 2020-04-27 |
| Last Modified | 2020-07-05 |
| Technical Level | Advanced |
| Products | Security Management Server, Multi-Domain Security Management Server, Logging & Status |
| Versions | R82.10, R82, R81.20, R82.10, R82.10, R81.20, R82, R81.20, R82 |
| OS | Gaia |

## Symptoms

- * Changes made to Network Objects on the Security Management Server are not reflected in the Logs view.
* SmartEvent object is missing in "Log Servers" tab in Logs \& Monitor.
* The `dbsync.elg` shows:  

  `ERROR db_sync.server_side.DiffCalculator [dbsyncTaskExecutor-2]: GetDiff failure DomainId:41e821a0-3720-11e3-aa6e-0800200c9fde WorkSession:d9f0819b-6c6a-4711-a8f5-43f8878bfc7d`  
  `
  CpmGeneralException{base='com.checkpoint.management.is.exceptions.CpmGeneralException', errorCode='`**CP_ERR_WORK_SESSION_NOT_FOUND** `', errorFamily='null', messageForUser='null', message='null'}`  
  `
  at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.getAndCacheWorkSessionFromDb_aroundBody36(WorkSessionMgmtSvcImpl.java:2640)`  
  `
  at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl$AjcClosure37.run(WorkSessionMgmtSvcImpl.java:1)`  
  `
  at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)`  
  `
  at com.checkpoint.management.dleserver.coresvc.internal.TransactionRetrySvcImpl.proceed(TransactionRetrySvcImpl.java:79)`  
  `
  at com.checkpoint.management.dle.aspects.TransactionRetryAspect.aroundOperation(TransactionRetryAspect.java:7)`  
  `
  at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.getAndCacheWorkSessionFromDb(WorkSessionMgmtSvcImpl.java:935)`  
  `
  at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.getWorkSession(WorkSessionMgmtSvcImpl.java:2642)`  
  `
  at com.checkpoint.management.dleserver.coresvc.internal.DomainWorkSessionSvcImpl.getDomainWorkSessionByWorkSessionAndDomainId(DomainWorkSessionSvcImpl.java:42)`  
  `
  at com.checkpoint.management.db_sync.server_side.DiffCalculator.getDiff(DiffCalculator.java:286)`  
  `
  at com.checkpoint.management.db_sync.server_side.DiffHandler.call(DiffHandler.java:16)`  
  `
  at com.checkpoint.management.db_sync.server_side.DiffHandler.call(DiffHandler.java:47)`  
  `
  at java.util.concurrent.FutureTask.run(FutureTask.java:277)`  
  `
  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)`
* Re-creating the SmartEvent object does not resolve the issue.

## Cause

The last updated worksession id was deleted, the causes an error in dbsync that fails to sync the latest changes as it fails to find from where to do the sync.

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content