Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
rahul130191
Explorer

Checkpoint Log Exported format issue with Logrhythm

Hi,

I have recently tried to configure log exporter on our Checkpoint firewall R80.20 on management server. We have applied the required jumbo hotfix on firewall and configured Logrhythm object using cp log export.

Logrhythm demands the logs to contain a pipe (|) separating the fields to be able to parse properly. However, on configuring the log exporter, i am getting the logs from Checkpoint in raw format instead of with the pipe.


Has anyone faced similar issue with Checkpoint logs and can help with the resolution? I have raised a case with support as well but they don't seem to be able to find a solution yet.

 

 

0 Kudos
1 Reply
_Val_
Admin
Admin

Log exporter send logs as syslog. You might need to tune Logrhythm parsing though. Did you look into sk122323 yet?

0 Kudos