<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Log Exporter in General Topics</title>
    <link>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/276164#M46097</link>
    <description>&lt;P&gt;None ?&lt;/P&gt;</description>
    <pubDate>Tue, 28 Apr 2026 13:15:07 GMT</pubDate>
    <dc:creator>Luis_Miguel_Mig</dc:creator>
    <dc:date>2026-04-28T13:15:07Z</dc:date>
    <item>
      <title>Log Exporter</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/275675#M46023</link>
      <description>&lt;P&gt;I have been exporting logs with log exporter for&amp;nbsp; years in syslog format.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Now, I have a new requirement, I would like to receive dst_machine_name and src_machine_name in the syslog server but it seems that they are not exported by default.&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;at /opt/CPrt-R81.20/log_exporter/targets/target1/targetConfiguration.xml&lt;BR /&gt;&lt;BR /&gt;---&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;&amp;nbsp;&amp;lt;format type="syslog"&amp;gt;&amp;nbsp;&amp;lt;!--syslog | cef | rsa | leef | generic | splunk | this parameter may differ from the type of destination, for example, destination type = files/format type = CEF --&amp;gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;&amp;nbsp;&amp;nbsp;&amp;lt;resolver&amp;gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;lt;mappingConfiguration&amp;gt;&amp;lt;/mappingConfiguration&amp;gt;&amp;lt;!--if empty the fields are sent as is without renaming--&amp;gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;lt;exportAllFields&amp;gt;true&amp;lt;/exportAllFields&amp;gt; &amp;lt;!--in case exportAllFields=true - exported element in fieldsMapping.xml is ignored and fields not from fieldsMapping.xml are exported as notMappedField field--&amp;gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;&amp;nbsp;&amp;nbsp;&amp;lt;/resolver&amp;gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;&amp;nbsp;----&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;So if &amp;lt;exportAllFields&amp;gt; is true, why are not all the fields exported - including dst_machine_name and src_machine_name?&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="uiOutputText"&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 17 Apr 2026 09:58:50 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/275675#M46023</guid>
      <dc:creator>Luis_Miguel_Mig</dc:creator>
      <dc:date>2026-04-17T09:58:50Z</dc:date>
    </item>
    <item>
      <title>Re: Log Exporter</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/275676#M46024</link>
      <description>&lt;P&gt;hi,&lt;/P&gt;
&lt;P&gt;I guess you checked already&amp;nbsp;sk144192.&lt;/P&gt;
&lt;P&gt;However, we have had similar issues with missing fields while using CEF.&lt;/P&gt;
&lt;P&gt;TAC could not help.&lt;/P&gt;
&lt;P&gt;RFE has been created (o7Q83gkQF].&lt;/P&gt;
&lt;P&gt;No response until now.&lt;/P&gt;
&lt;P&gt;Best Regards&lt;/P&gt;</description>
      <pubDate>Fri, 17 Apr 2026 10:45:39 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/275676#M46024</guid>
      <dc:creator>S_E_</dc:creator>
      <dc:date>2026-04-17T10:45:39Z</dc:date>
    </item>
    <item>
      <title>Re: Log Exporter</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/275682#M46025</link>
      <description>&lt;P&gt;yeah, and the log exporter guide too.&lt;BR /&gt;Both&amp;nbsp;&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;&lt;EM&gt;$RTDIR/log_exporter/conf/LogFields.xml and&lt;/EM&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;EM&gt;$RTDIR/log_exporter/targets/target/conf/LogFields.xml&lt;BR /&gt;&lt;BR /&gt;are the same file and contain src_machine_name and dst_machine_name&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/EM&gt;and due to the fact that&amp;nbsp;&lt;SPAN&gt;&amp;lt;exportAllFields&amp;gt; is true, I don't think I need to do anything with the mapping xml files.&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;So I don't understand the behaviour, it doesn't work as expected as far as I understand.&lt;/LI&gt;
&lt;/UL&gt;</description>
      <pubDate>Fri, 17 Apr 2026 11:58:15 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/275682#M46025</guid>
      <dc:creator>Luis_Miguel_Mig</dc:creator>
      <dc:date>2026-04-17T11:58:15Z</dc:date>
    </item>
    <item>
      <title>Re: Log Exporter</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/276164#M46097</link>
      <description>&lt;P&gt;None ?&lt;/P&gt;</description>
      <pubDate>Tue, 28 Apr 2026 13:15:07 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Log-Exporter/m-p/276164#M46097</guid>
      <dc:creator>Luis_Miguel_Mig</dc:creator>
      <dc:date>2026-04-28T13:15:07Z</dc:date>
    </item>
  </channel>
</rss>

