> Source: [sk181809](https://support.checkpoint.com/results/sk/sk181809)

# sk181809 - IPS or Anti-Bot logs do not show when filtering for these blades

| Property | Value |
|----------|-------|
| Solution ID | sk181809 |
| Date Created | 2023-12-20 |
| Last Modified | 2024-10-27 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82, R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * In SmartConsole \> Logs and Monitor view \> Logs tab, IPS or Anti-Bot logs do not show when filtering for these blades.
* Can see all other logs when filtering for other blade(s).

## Cause

The file `$INDEXERDIR/conf/log_indexer_settings.conf` was edited incorrectly, which broke the filtering. The blade was set to `solr` instead of `tproduct`.

## Solution

**Solution 1**   

Replace the current file with a file from a freshly installed device of the same version.  

**Solution 2**   

Create a new log exporter target on the current device and copy the target's  

`/opt/CPrt-R8x.xx/log_exporter/targets/<new_target>/conf/log_indexer_settings.conf`  

file to the relevant directory:
`/opt/CPrt-R8x.xx/log_indexer/conf/log_indexer_settings.conf`  

**Procedure** :   

1. Make a backup of the current file:  
   `# cp -v $INDEXERDIR/conf/log_indexer_settings.conf{,_backup}`
2. Create a new file by creating a new log exporter target. Run:  
   `# cp_log_export add name test target-server 127.0.0.1 target-port 9990 format syslog protocol udp`  
   This does not export logs because the target is not started.
3. Move the new file to `$INDEXERDIR/conf/`  
   Run:  
   `# yes| cp -v $EXPORTERDIR/targets/test/conf/log_indexer_settings.conf $INDEXERDIR/conf/`
4. Delete the log exporter target. Run:  
   `# cp_log_export delete name test --apply-now`
5. Restart Logging Services. Run:  
   `# evstop;evstart`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content