https://community.splunk.com/t5/Security/Checkpoint-Logs-and-no-OPSEC/m-p/62700#M2087 <P>Is there a way to grab logs from Checkpoint FW-1 without using OPSEC? Any suggestions will be appreciated ;).</P> Sat, 02 Oct 2010 03:40:52 GMT BunnyHop 2010-10-02T03:40:52Z https://community.splunk.com/t5/Security/Checkpoint-Logs-and-no-OPSEC/m-p/62700#M2087 <P>Is there a way to grab logs from Checkpoint FW-1 without using OPSEC? Any suggestions will be appreciated ;).</P> Sat, 02 Oct 2010 03:40:52 GMT https://community.splunk.com/t5/Security/Checkpoint-Logs-and-no-OPSEC/m-p/62700#M2087 BunnyHop 2010-10-02T03:40:52Z https://community.splunk.com/t5/Security/Checkpoint-Logs-and-no-OPSEC/m-p/62701#M2088 <P>Hi, I'm using 'fw log -l -n -p' to export the logs to a file. You'll need to setup a sourcetype as per <A href="http://answers.splunk.com/questions/11592/parsing-checkpoint-firewall-log-dates" rel="nofollow">http://answers.splunk.com/questions/11592/parsing-checkpoint-firewall-log-dates</A> to splunk understands the timestamp.</P> <P>Take a look at 'fw log -h' for other options such as tailing the log which might be usable in a scripted input.</P> Wed, 06 Apr 2011 18:03:04 GMT https://community.splunk.com/t5/Security/Checkpoint-Logs-and-no-OPSEC/m-p/62701#M2088 mpf 2011-04-06T18:03:04Z