Checkpoint syslog

[NAMKYUN_KIM]

Hello All,

This is Tim.

I'm using Checkpoint 5600 (F/W, IPS).

And I'm gonna export syslog to my server and then normalize syslog to monitor ips signature in the platform(SIEM).

But the problem is that i don't know syslog format. To normalize syslog into SIEM, I need to know about syslog format.

So, my question is where can i get information of syslog format.

It would be great if document which describes syslog exists.

Thank you for your help in advance.

[G_W_Albrecht · Accepted solution]

Looks like you need Log Exporter: sk122323: Log Exporter - Check Point Log Export 😉