Daily Report for CPLP (Live Patch) Audit Events

[EVeloso]

Hello,

I would like to receive a daily email report containing the CPLP (Check Point Live Patch) audit events:

audit query: 

operation:("Live Patch Installed" OR "Live Patch Coverage Report")

What is the recommended way to create a scheduled report in SmartConsole/SmartEvent based on this filter and have it automatically generated and emailed every day?

Is an email generated when a live update is performed?

Has anyone implemented this successfully, and if so, what configuration steps are required?

Thanks.

[Lesley]

If you have SmartEvent you can try:

https://support.checkpoint.com/results/sk/sk101108

Also Check Point the new hardening reports that are created daily, you can access them from Smart Webconsole. 

[Henrik_Noerr1]

on that note - we are using the log exporter to send traffic and audit logs to Elastic.

I have no problem finding other audit logs, log in, log out, install policy etc. But we see no events sent for the CPLP actions.

Are we missing something? When will this be included?

/Henrik