LEA Not Starting

[Ethan_Keaton]

Trying to get an R77.30 CMA & CLM working with LEA. Able to pull cert from the CMA w/o issue put getting following errors when launching LEA:

store_open: Failed stat: Value too large for defined data type
Failed to open LEA state file

Trying running LEA in DEBUG mode wasn't too helpful either. 

[Lari_Luoma]

Check Point's recommended solution is Log Exporter.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Dan_Zada]

Hi Ethan,

Our recommendation is to move to the Log Exporter (SK122323).

The advantages of the log exporter are:

1. Very easy to configure and maintain

2. Can export logs to all SIEM vendors

3. Use standard protocols and formats

4. Can have an exporting filter

Let me know if you have any questions or concerns about that.

Thanks!

Dan.