Send logs from Smart Endpoint (on-premise) to Smart Event (on-premise) (different servers)

[Martins]

Hi it's possible to send the logs from Smart Endpoint (on-premise) to Smart Event (on-premise). If yes, someone can share the documentation? Thanks!

[PhoneBoy]

See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
The Endpoint Management is the external log server in this case.

[jorgem]

Hi,

what about sending Harmony Endpoint (Cloud managed) logs into an on-premises SmartEvent server?

Thanks.

[Swiftyyyy]

This also interests me.
Though Harmony Endpoint (Cloud managed) already has SmartEvent included with the package, but as far as I'm aware you're not really able to make custom actions and correlations as you do with the on-premises server.

Sending email notifications for specific detection events (most notably, ransomware) is a thing that a lot of our environments would benefit from.

[PhoneBoy]

I don't believe this is currently possible at the moment and would be an RFE.

[jorgem]

This is fine, thanks. In this specific customer, on-premises Management Server will be the choice.

KR,

Jorge.