topic Re: how to send log from Checkpoint Gaia R77.20 OPSEC LEA to Splunk/external syslog Server. in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87266#M6736 <P>I would like to help you but my best recommendation is to upgrade and work with log exporter, at least to R77.30.</P> <P>I'm also attaching a guide I have about how to connect Splunk with OPSEC LEA.</P> <P>Amir Senn</P> Thu, 04 Jun 2020 07:58:06 GMT Amir_Senn 2020-06-04T07:58:06Z how to send log from Checkpoint Gaia R77.20 OPSEC LEA to Splunk/external syslog Server. https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87127#M6719 <P>Hello Expert.</P><P>I have R77.20 Gaia. I need help to configure&nbsp;OPSEC LEA to send logs to externla syslog Server/Splunk.</P><P>Please guide me or share if any SK is available.</P> Wed, 03 Jun 2020 05:31:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87127#M6719 shamimalam 2020-06-03T05:31:15Z Re: how to send log from Checkpoint Gaia R77.20 OPSEC LEA to Splunk/external syslog Server. https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87150#M6722 <P>It's difficult to get questions answered when working on unsupported Software versions, like R77.20</P><P>If you run a supported version,&nbsp; sk122323 might help</P> Wed, 03 Jun 2020 08:38:22 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87150#M6722 peter_schumache 2020-06-03T08:38:22Z Re: how to send log from Checkpoint Gaia R77.20 OPSEC LEA to Splunk/external syslog Server. https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87225#M6729 OPSEC LEA requires a third party connector to pull the logs.<BR />Whether Splunk still maintains their previous LEA connector, I'm not sure.<BR />The preferred method for integration with ALL SIEMs including Splunk is Log Exporter.<BR />Log Exporter is not available on R77.20.<BR />You will need to upgrade to a supported release. Wed, 03 Jun 2020 23:38:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87225#M6729 PhoneBoy 2020-06-03T23:38:17Z Re: how to send log from Checkpoint Gaia R77.20 OPSEC LEA to Splunk/external syslog Server. https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87266#M6736 <P>I would like to help you but my best recommendation is to upgrade and work with log exporter, at least to R77.30.</P> <P>I'm also attaching a guide I have about how to connect Splunk with OPSEC LEA.</P> <P>Amir Senn</P> Thu, 04 Jun 2020 07:58:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87266#M6736 Amir_Senn 2020-06-04T07:58:06Z Re: how to send log from Checkpoint Gaia R77.20 OPSEC LEA to Splunk/external syslog Server. https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87834#M6793 <P>I'll be happy to know if the guide I offered (or any other answer here) helped you.</P> <P>You can also leave contact info and if you still have issues we'll be glad to help you through them.</P> Wed, 10 Jun 2020 06:49:33 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/how-to-send-log-from-Checkpoint-Gaia-R77-20-OPSEC-LEA-to-Splunk/m-p/87834#M6793 Amir_Senn 2020-06-10T06:49:33Z