topic Re: Parsing external Syslog sources in Firewall and Security Management

Parsing external Syslog sources

Hugo_vd_Kooij — Wed, 25 Nov 2020 14:58:58 GMT

This is a shameless plug for my syslog parsers.

You can find them on https://github.com/hvdkooij/syslog2checkpoint and in particular the iptables parser works rather well for me.

My home router (ASUS RT-AC68U) can send syslog to a SmartCenter I have externally in my lab and I have full insight on what is going on my home network this way.

Unfortunatly I have no longer a Barracuda Email Security Gateway in my lab so I can't play with that.

Anyone willing to tinker with a syslog parser for Check Point feel free to contact me.

Re: Parsing external Syslog sources

PhoneBoy — Thu, 26 Nov 2020 03:40:27 GMT

@_Val_ potential toolbox addition?

Re: Parsing external Syslog sources

_Val_ — Thu, 26 Nov 2020 09:32:03 GMT

@PhoneBoy probably yes.

@Hugo_vd_Kooij could you please consider this to be moved to ToolBox. If it okay with you, reach out to me to vloukine@checkpoint.com.

Thanks,

Val

Re: Parsing external Syslog sources

Hugo_vd_Kooij — Fri, 27 Nov 2020 10:29:05 GMT

As far as the iptables parser is concerned, no problem as I can maintain that.