SmartConsole's "Logs & Monitor" tab does not show logs, "The session has expired. please try to refresh the view" message appears

Product

Security Management

Version

R81.20

Last Modified

2025-03-20

Symptoms

• After installing R81.20 Jumbo Hotfix Take 90 or 92, the Logs & Monitor tab in SmartConsole does not display logs, and the page remains blank. The following message appears:

The session has expired. Please try to refresh the view.

Additional Observations:

• The fw.log file is growing, indicating that logs are being recorded.
• The Log Indexer is indexing the logs. The log_indexer.elg file shows Sent Current: ###
• The /opt/CPrt-R81.20/log/RFL.log file contains these lines:

    ERROR [pool-1-thread-3]
    com.checkpoint.rfl.exceptions.DefaultUncaughtExceptionHandler.uncaughtException:3 - uncaught
        exception from thread id: [68], name: [pool-1-thread-3]

java.lang.NoSuchFieldError: org/apache/cxf/message/Message.CONTENT_TRANSFER_ENCODING
    ```

## Cause
A deprecated _.ja_ r file causes a code dependency issue.

## Solution
This problem was fixed. The fix is included in:

- [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 99

If you choose not to upgrade, Check Point can supply a **Hotfix**. [Contact Check Point Support](https://www.checkpoint.com/support-services/.contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**

Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

**Important Note**: Perform these steps during a maintenance window to reduce impact.

1. Close SmartConsole.
2. Connect to the command line on the problematic Server.
3. Log in to the command line.
4. If the default shell is Gaia Clish, then go to the Expert mode:
    
    `expert`
5. Delete the _/opt/CPrt-R81.20/jars/cxf-core_fix-3.1.0.jar_ file:
    
    `# rm /opt/CPrt-R81.20/jars/cxf-core_fix-3.1.0.jar`
6. Restart logging services:
    
    `evstop ; evstart`

#### NOTE
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

## Article Properties
Access Level: General
Status: Approved by TAC
Date Created: 2025-01-29
Last Modified: 2025-03-20