# The "Logs" column in the Threat Prevention report incorrectly displays a count of "0" for all protections

## Product
Logging and Status

## Version
R81.20, R82, R82.10

## OS
Gaia

## Platform
Smart-1

## Last Modified
2026-05-26

## Symptoms

- The "Top Protections" pane, in the Threat Prevention report, incorrectly displays a count of "0" logs for all protections, even when events are actually logged. It is not possible to sort "Top Protections" by log volume because of incorrect data.
- All other reports display accurate log and event counts.

## Cause

Discrepancy between the formats prevents the log parser from correctly extracting and counting the suppressed log values for the "Top Protections" aggregation.

## Solution

This problem was fixed. The fix is included in:

- [Jumbo Hotfix Accumulator for R82.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm) starting from Take 19
- [Jumbo Hotfix Accumulator for R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) starting from Take 103

If you choose not to upgrade, Check Point can supply a **Hotfix**. [Contact Check Point Support](https://www.checkpoint.com/support-services/.contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**

Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

#### NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

## Article Properties

Access Level
General

Status
Approved by TAC

Date Created
2025-12-31

Last Modified
2026-05-26