topic Re: Is there a way to modify Checkpoint alert layouts? in Firewall and Security Management

Is there a way to modify Checkpoint alert layouts?

Shehan_Wickrama — Mon, 28 May 2018 05:06:59 GMT

Hello Guys,

Currently I'm receiving alerts in the below format

HeaderDateHour: 24May2018 17:36:51; ContentVersion: x; HighLevelLogKey: N/A; LogUid: N/A; SequenceNum: N/A; Action: ctl; Origin: xxxxx; IfDir: >; IfName: N/A; Alert: mail; OriginSicName: CN=xxxxxxxxx,O=cpm.xxxx; OriginSicName: CN=xxxxxxxxxxx,O=cxxxxxxxx..xxxx; HighLevelLogKey: xxxxxxxxxxx; cluster_info: (ClusterXL) member 1 (xx.xx.xx.xx) is down.; ProductName: VPN-1 & FireWall-1; ProductFamily: Network;

OS :R80.10

I want to change the format to a more clear able one . How can i do this? Where to edit?

eg:

HeaderDateHour: 24May2018 17:36:51;

ContentVersion: x;

HighLevelLogKey: N/A;

LogUid: N/A;

Re: Is there a way to modify Checkpoint alert layouts?

XavierBens — Fri, 21 Jun 2019 09:14:13 GMT

Did you tried UserDefined script?

Look at the last answer on the https://community.checkpoint.com/message/17145-how-to-use-mail-alert-body-data-in-external-script-for-user-defined-alerts-thresholds thread.

Re: Is there a way to modify Checkpoint alert layouts?

Shehan_Wickrama — Thu, 31 May 2018 05:00:40 GMT

Hello,

The mentioned article does not contain a way to get body parameters can you tell me how to get the parameters so i can use them in the script