Using R80 and need to send logs to a Splunk server. Any idea how?

[Myron_Magee]

We are running R80 GA and I need send logs to a new splunk server. Looking to see if anyone is doing the same.

[Security_Depart · Accepted solution]

Hi

I do not sue SPlunk but had issue with the SIEM solution we used. If you use an Opsec object to sent logs to Splunk you will potentially need to downgrade the CA certificate on R80 from Sha 256 to Sha 1 if Splunk doesn't support Sha256 yet

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...