Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Shehan_Wickrama
Collaborator

Is there a way to modify Checkpoint alert layouts?

Hello Guys,

Currently I'm receiving alerts in the below format

HeaderDateHour: 24May2018 17:36:51; ContentVersion: x; HighLevelLogKey: N/A; LogUid: N/A; SequenceNum: N/A; Action: ctl; Origin: xxxxx; IfDir: >; IfName: N/A; Alert: mail; OriginSicName: CN=xxxxxxxxx,O=cpm.xxxx; OriginSicName: CN=xxxxxxxxxxx,O=cxxxxxxxx..xxxx; HighLevelLogKey: xxxxxxxxxxx; cluster_info: (ClusterXL) member 1 (xx.xx.xx.xx) is down.; ProductName: VPN-1 & FireWall-1; ProductFamily: Network;

OS :R80.10

I want to change the format to a more clear able one . How can i do this? Where to edit?

eg:

HeaderDateHour: 24May2018 17:36:51;

ContentVersion: x;

HighLevelLogKey: N/A;

LogUid: N/A;

2 Replies
XBensemhoun
Employee
Employee

Did you tried UserDefined script?

Look at the last answer on the https://community.checkpoint.com/message/17145-how-to-use-mail-alert-body-data-in-external-script-fo... thread.

Information Security enthusiast, CISSP, CCSP
Shehan_Wickrama
Collaborator

Hello,

The mentioned article does not contain a way to get body parameters can you tell me how to get the parameters so i can use them in the script

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events