CPLogToSyslog in R80.10

[Tom_Cripps]

Hi all, 

We're having issues getting CPLogToSyslog fully working in our Checkpoint environment. We can see it working in R77.30 but not in R80.10. The issue we're facing is the utility holding a connection to our Syslog server essentially. We can see in Wireshark the traffic on the Syslog server but after a short period of time, the traffic will stop. As stated we have this running for over 2 hours now in R77.30 so we think it's either an issue with the version of Checkpoint, or it may be something to do with our amount of traffic we send to our R80.10 Management servers. 

I'd love to see if anyone else has come into this issue, and if you've resolved it, how?

Tom Cripps

[Peter_Sandkuijl]

cplogtosyslog is very version and hotfix dependent, did you check How to export Check Point logs to a Syslog server using CPLogToSyslog  ?

BR

Peter !!

[Tom_Cripps]

Hi Peter,

Yes, I've made I'm using the correct version and also the correct Hotfix too.

Kind regards, 

Tom