> Source: [sk90040](https://support.checkpoint.com/results/sk/sk90040)

# sk90040 - 'Hits' counter in the rulebase is not updated

| Property | Value |
|----------|-------|
| Solution ID | sk90040 |
| Date Created | 2012-12-12 |
| Last Modified | 2020-01-21 |
| Technical Level | General |
| Products | Security Gateway, SmartConsole |
| Versions | R82.10, R82, R81.20, R82.10, R82.20, R82, R81.20 |

## Symptoms

- * 'Hits' counter in the rulebase stopped updating.

* Kernel debug (`fw ctl debug -m fw + filter`) shows:

  `;fw_rules_uid_prepare: Rules uid limit exceeded, feture will be disabled;`  
  `;to increase the number of rules uid, set fw_rules_uid_max_dic_entries param`  
  `using "fw ctl set int" command;`

## Cause

In order for 'HitCount' feature to work, rule UID is being used. The UIDs are stored in a table on the Security Gateway.

In this scenario, the table reached its limit (by default, 19999 in all versions since R75.40), which caused 'HitCount' feature to stop working.

## Solution

Increase the table's limit for storing greater number of rules' UIDs on Security Gateway by setting a desired value to **fw_rules_uid_max_dic_entries** kernel parameter:

* To increase the limit *on-the-fly* :   

  `[Expert@HostName]# fw ctl get int fw_rules_uid_max_dic_entries`  
  `[Expert@HostName]# fw ctl set int fw_rules_uid_max_dic_entries `*VALUE*   

* To increase the limit *permanently* :   

  Refer to [sk26202 (Changing the kernel global parameters for Check Point Security Gateway)](http://supportcontent.checkpoint.com/solutions?id=sk26202).

Note: The maximal limit of '`fw_rules_uid_max_dic_entries`' value is (2^31^-1) = 2,147,483,647.

In order to see if this table reaches its limit, run the kernel debug of '**`fw`** ' module with flag '**`filter`**'.

The following messages will be printed:

```
fwk_get_new_global_settings: fw_nrules_new param is: Value_of_fw_nrules_new_param
fwk_get_new_global_settings: rulebase_uids_in_log param is: ...
fw_rules_uid_prepare: fw_rules_uid_max_dic_entries = Value_of_"fw_rules_uid_max_dic_entries"
```

And if `(Value_of_"fw_rules_uid_max_dic_entries" - Value_of_fw_nrules_new_param <= 0)`, then also these lines will be printed:

```
fw_rules_uid_prepare: Rules uid limit exceeded, feature will be disabled
to increase the number of rules uid, set fw_rules_uid_max_dic_entries param
using "fw ctl set int" command
```

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content