Log Exporter to SIEM via CEF forwarder

[jt-jt]

Hi,

Please can someone enlighten me in the following?
Do the Check Point exported logs (via log exporter) specify which Facility (e.g. Local 7 or else) when going via a CEF forwarder into a SIEM please?

Thanks.

[_Val_]

Hi, just to make sure, did you already review sk122323, specifically its CEF section?

If yes, and you still have questions, please elaborate.

I also encourage you to search this community for other CEF related discussions, there are a quite a few.