This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Blason_R
Leader
Leader
Thursday

What should be the settings for ingesting logs in SIEM for self managed spark devices

Hello,

If I need to ingest the and analyze the logs from spark 1500 series devices what should be a log type at SIEM end? it does not look like an CEF messages. It neither appears syslog messages , looks like those are KV pair messages?

Are those being sent using parsed method? Those are not being managed by centrally managed server and its standalone device.

 

 

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
0 Kudos
1 Reply
PhoneBoy
Admin
Admin
Friday

Not exactly sure what format Quantum Spark appliances export their data in that is relevant to SIEM.
I know it can't be changed.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

View All ≫
Upcoming Events

    Sort by:
    CheckMates Events