> Source: [sk97885](https://support.checkpoint.com/results/sk/sk97885)

# sk97885 - Matching SmartLog index to specific log file

| Property | Value |
|----------|-------|
| Solution ID | sk97885 |
| Date Created | 2014-01-05 |
| Last Modified | 2015-04-21 |
| Technical Level | General |
| Products | Logging & Status |
| Versions | R82.10, R81.20, R82 |
| OS | Gaia |
| Platform | Smart-1 |

## Solution

Follow these steps:

1. Connect to command line on **SmartLog** machine (over SSH, or console).   

2. Log in to Expert mode.   

3. List the Index file(s):   

   **`[Expert@HostName]# ls -l $SMARTLOGDIR/data`**   

   *Example* :   

   `drwxrwx--- 2 admin root 4096 Dec 26 10:55 `**Index528d30a400000000**   

4. Copy the first **8 digits** after the "Index" word.   

   *Example* :   

   From the **`Index528d30a400000000`** we copy **`528d30a4`** .   

5. Translate the copied number from HEX format to DEC format (e.g., use Windows calculator).   

   *Example* :   

   528d30a4 ~hex~ = 1384984740 ~dec~   

6. Search for the copied index (in DEC format) inside the `$SMARTLOGDIR/data/FetchedFiles` file:   

   **Important Note:** There can be more than one index for one log file.   

   **`[Expert@HostName]# grep `*DEC_INDEX*` $SMARTLOGDIR/data/FetchedFiles`**   

   *Example* :   

   **`[Expert@HostName]# grep 1384984740 $SMARTLOGDIR/data/FetchedFiles`**   

7. On the left side of the index number you can see the name of the log file.   

   *Example* :   

   `1 9 127.0.0.1 23 `**2013-11-21_160454_1.log 1384984740**` 1 7500231 0 0`   

   The name of the log file is:  
   `2013-11-21_160454_1.log`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content