Logs - API

[Joshua_Boerum]

Are the logs accessible via the API?

-Josh

[Uri_Bialik · Accepted solution]

R80 does doesn't have APIs that can read logs.

This is on our to-do list for a future release.

[Rasool_Irfan]

Does checkpoint support open and standard API to export internal logs and security events to SIEM

[PhoneBoy]

A number of third party SIEMs support pulling logs from Check Point management devices.

It is done through the Log Export API (LEA), which is part of the OPSEC SDK​​.

fw1-loggrabber​ is an open source tool that pulls logs from Check Point devices.

[Julie_Paul]

Yes we do today in R80.40 with latest JHF and with R81.    Check out  https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-logs~v1.6.1%20