You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What…

The question indicates that the RFL (Request For Logging) process has a status of 'T' in the output of cpwdadmin list. According to Check Point documentation, the 'T' status signifies that the process is Terminated and the Check Point WatchDog (cpwd) is not attempting to restart it. The RFL process is a component of the Check Point Log Server. In modern R80.x and newer architectures, the Log Server is managed as a single service controlled by the smartlogserver daemon. To resolve the issue of a terminated logging process and restore log visibility, the administrator must manually restart the Log Server service using the appropriate management commands, which are smartlogserver stop and smartlogserver start (or smartlogserver restart).

A. RFLstop and RFLstart are not valid Check Point commands for process management. Process control is handled by specific daemon scripts or higher-level commands like cpstop/cpstart.

B. evstart and evstop are commands used to manage the SmartEvent server processes, which are responsible for event correlation, not the primary log reception and indexing function.

D. rflsop and rflstart are typographical errors and do not correspond to any valid Check Point commands.

1. Check Point Support Center, sk97638 - Check Point Processes and Daemons: This article details the various processes running on Check Point systems. It explains the output of the cpwdadmin list command, defining the status 'T' as "Terminated - process is down and cpwd is not trying to start it". It also identifies the core logging daemons and their relation to the overall system.

2. Check Point Support Center, sk104419 - How to start/stop a specific Check Point daemon: This guide provides a definitive list of commands for managing specific Check Point services. It explicitly states that the "Log Server" is controlled by the command smartlogserver start/stop/restart, directly validating the correct answer.

3. Check Point R81.10 CLI Reference Guide: In the section for "System Level and General Commands," the guide details the management of Check Point daemons. It confirms that services like the Log Server have dedicated control scripts (e.g., smartlogserver) for administration from the command line. (Refer to chapters on process and service management).