Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Luis_Miguel_Mig
Advisor
Jump to solution

cp_log_export - src/dst ip object name

I would like to include the fields src name and dst name when I export logs with cp_log_export in syslog format.
Does anybody know how?
The same way I see the src/dst object name in smartconsole logs I would like to see in the platform  where I export checkpoint logs.

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Unfortunately, the object name for Source/Destination fields are not sent via Log Exporter, only the IP.
You can confirm this by reviewing the field names and descriptions here: https://support.checkpoint.com/results/sk/sk144192
I assume this would be an RFE.

View solution in original post

0 Kudos
3 Replies
PhoneBoy
Admin
Admin

Unfortunately, the object name for Source/Destination fields are not sent via Log Exporter, only the IP.
You can confirm this by reviewing the field names and descriptions here: https://support.checkpoint.com/results/sk/sk144192
I assume this would be an RFE.

0 Kudos
Luis_Miguel_Mig
Advisor

I have the impression though that the intention is to send the object name too but it is a sort of a bug. 

Some thing with origin name (gateway name)
At sk144192 you have the following fields:
origin, origin_ip, src, src_ip, dst, dst_ip and they are eventually all ip addresses and none of them names.

0 Kudos
PhoneBoy
Admin
Admin

I confirmed with R&D it is expected behavior not to export object names with Log Exporter.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events