156-215.81.20 Monitoring and Logging Practice Question
An administrator is troubleshooting an issue where logs from a Security Gateway are not appearing in SmartLog. The administrator verifies that the gateway is sending logs to the Management Server, but the logs are not indexed. Which service should the administrator check on the Management Server to ensure proper log indexing?
⚠ Common exam trap
Many exam-takers confuse the solr indexing service with general management services like cpd or monitoring tools like CPView, which do not handle log indexing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
solr
The solr service is responsible for indexing logs on the Management Server. When logs are received, solr processes them to enable fast searching in SmartLog. If solr is not running or has errors, logs will not be indexed and will be missing from SmartLog. The administrator should check the status of the solr service and review its logs for any issues.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
fwd
Why it's wrong here
fwd is the Security Gateway daemon that enforces the security policy and generates logs. It runs on the gateway, not the Management Server. Checking fwd on the Management Server is irrelevant because the Management Server does not enforce policies or generate logs. The issue is with indexing, which is a management-side function.
- ✗
CPView
Why it's wrong here
CPView is a monitoring tool that provides real-time performance data on Check Point appliances. It is not a service responsible for log indexing. While CPView can help diagnose system resource issues, it does not directly manage or perform log indexing. The administrator needs to check the actual indexing service, not a monitoring utility.
- ✓
solr
Why this is correct
The solr service is the indexing engine used by Check Point for log indexing in SmartLog. If solr is not running or is malfunctioning, logs will not be indexed and thus will not appear in SmartLog searches. The administrator should verify that the solr service is active and check its logs for errors to resolve the indexing issue.
- ✗
cpd
Why it's wrong here
cpd is the main Check Point daemon responsible for policy installation, licensing, and communication between management and gateways. While it is critical for overall management, it does not perform log indexing. If cpd fails, policy installation and other management functions would be affected, but log indexing is handled by a different process.
About these practice questions
Courseiva writes every 156-215.81.20 question from scratch — 210 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-215.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-215.81.20 exam.