topic Re: Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers) in Endpoint

Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers)

Martins — Fri, 11 Dec 2020 17:56:35 GMT

Hi it's possible to send the logs from Smart Endpoint (on-premise) to Smart Event (on-premise). If yes, someone can share the documentation? Thanks!

Re: Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers)

PhoneBoy — Sat, 12 Dec 2020 20:49:56 GMT

See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk35288
The Endpoint Management is the external log server in this case.

Re: Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers)

jorgem — Fri, 07 Oct 2022 12:19:53 GMT

Hi,

what about sending Harmony Endpoint (Cloud managed) logs into an on-premises SmartEvent server?

Thanks.

Re: Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers)

Swiftyyyy — Fri, 07 Oct 2022 12:33:39 GMT

This also interests me.
Though Harmony Endpoint (Cloud managed) already has SmartEvent included with the package, but as far as I'm aware you're not really able to make custom actions and correlations as you do with the on-premises server.

Sending email notifications for specific detection events (most notably, ransomware) is a thing that a lot of our environments would benefit from.

Re: Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers)

PhoneBoy — Fri, 07 Oct 2022 16:39:50 GMT

I don't believe this is currently possible at the moment and would be an RFE.

Re: Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers)

jorgem — Fri, 07 Oct 2022 17:40:11 GMT

This is fine, thanks. In this specific customer, on-premises Management Server will be the choice.

KR,

Jorge.