topic Re: What should be the settings for ingesting logs in SIEM for self managed spark devices in General Topics https://community.checkpoint.com/t5/General-Topics/What-should-be-the-settings-for-ingesting-logs-in-SIEM-for-self/m-p/257771#M43468 <P>Not exactly sure what format Quantum Spark appliances export their data in that is relevant to SIEM.<BR />I know it can't be changed.</P> Fri, 19 Sep 2025 16:48:19 GMT PhoneBoy 2025-09-19T16:48:19Z What should be the settings for ingesting logs in SIEM for self managed spark devices https://community.checkpoint.com/t5/General-Topics/What-should-be-the-settings-for-ingesting-logs-in-SIEM-for-self/m-p/257702#M43465 <P>Hello,</P> <P>If I need to ingest the and analyze the logs from spark 1500 series devices what should be a log type at SIEM end? it does not look like an CEF messages. It neither appears syslog messages , looks like those are KV pair messages?</P> <P>Are those being sent using parsed method? Those are not being managed by centrally managed server and its standalone device.</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 19 Sep 2025 04:05:55 GMT https://community.checkpoint.com/t5/General-Topics/What-should-be-the-settings-for-ingesting-logs-in-SIEM-for-self/m-p/257702#M43465 Blason_R 2025-09-19T04:05:55Z Re: What should be the settings for ingesting logs in SIEM for self managed spark devices https://community.checkpoint.com/t5/General-Topics/What-should-be-the-settings-for-ingesting-logs-in-SIEM-for-self/m-p/257771#M43468 <P>Not exactly sure what format Quantum Spark appliances export their data in that is relevant to SIEM.<BR />I know it can't be changed.</P> Fri, 19 Sep 2025 16:48:19 GMT https://community.checkpoint.com/t5/General-Topics/What-should-be-the-settings-for-ingesting-logs-in-SIEM-for-self/m-p/257771#M43468 PhoneBoy 2025-09-19T16:48:19Z