Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
r1der
Advisor
Jump to solution

Custom Indicators, Observables not visible?

Hello,

Is there a way to see the Observables for custom indicators that is not using CSVs through SmartConsole?

I know it was visible with .csv, but does not appear it works for .txt files?

 

Using the ioc_feeds show --feedname "feednamehere" the command doesn't show me what is the observables either.

 

When I ping one of the sites, it is showing as Prevented in the Logs along with the observable/feed name. So it does appear to be active and working, but was wondering is there any easy way to see the observables?

Thanks!

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Not through SmartConsole, but you can see them in $FWDIR/external_ioc/feedname on the gateway in question.
This is documented in the troubleshooting section here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...,

 

View solution in original post

3 Replies
PhoneBoy
Admin
Admin

Not through SmartConsole, but you can see them in $FWDIR/external_ioc/feedname on the gateway in question.
This is documented in the troubleshooting section here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...,

 

r1der
Advisor

Thanks, exactly what I was looking for. 
Do you know if external IOC observables will ever be visible in SmartConsole?

0 Kudos
PhoneBoy
Admin
Admin

No idea if that's planned or not.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 20 May 2025 @ 11:30 AM (PDT)

    Las Vegas: Check Point Hybrid Mesh

    Wed 21 May 2025 @ 11:30 AM (MST)

    Tempe, AZ: Check Point Hybrid Mesh

    Tue 03 Jun 2025 @ 06:00 PM (EDT)

    Montreal: CPX Recap

    Tue 10 Jun 2025 @ 06:00 PM (EDT)

    Quebec City: CPX Recap
    CheckMates Events