https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439812#M68464 <P>Hello @mindterrian </P> <P>As per the above document, the add-on supports on Linux in case if you are using Universal Forwarder to collect data.</P> <P>If you are using any other component like search head or indexer , they can be on any platform.</P> Thu, 31 Jan 2019 08:29:57 GMT vishaltaneja070 2019-01-31T08:29:57Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439810#M68462 <P>Hi</P> <P>How can i collect the CheckPoint OPSEC Lea on Splunk Enterprise that install on Windows OS?<BR /> Because this guide (<A href="https://docs.splunk.com/Documentation/AddOns/released/OPSEC-LEA/Hardwareandsoftwarerequirements">https://docs.splunk.com/Documentation/AddOns/released/OPSEC-LEA/Hardwareandsoftwarerequirements</A>) only support on Linux OS.</P> <P>Thank you</P> Thu, 31 Jan 2019 07:30:10 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439810#M68462 mindterrian 2019-01-31T07:30:10Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439811#M68463 <P>There is an alternate option where you can analyze checkpoint logs via syslog. This add-on will help you analyze Check Point logs on Windows.</P> <P><A href="https://splunkbase.splunk.com/app/2996/">https://splunkbase.splunk.com/app/2996/</A></P> Thu, 31 Jan 2019 08:24:05 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439811#M68463 dkeck 2019-01-31T08:24:05Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439812#M68464 <P>Hello @mindterrian </P> <P>As per the above document, the add-on supports on Linux in case if you are using Universal Forwarder to collect data.</P> <P>If you are using any other component like search head or indexer , they can be on any platform.</P> Thu, 31 Jan 2019 08:29:57 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439812#M68464 vishaltaneja070 2019-01-31T08:29:57Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439813#M68465 <P>I can use Splunk Enterprise (Single Instance) that install on Windows OS to collect log from Check Point OPEC LEA via install Splunk Add-on for Check Point OPSEC LEA and Add connect right?</P> <P>or i should install universal forwarder on Linux OS and use Splunk Add-on for Check Point OPSEC LEA on Linux OS to collect log from Check Point?</P> Fri, 01 Feb 2019 07:18:46 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439813#M68465 mindterrian 2019-02-01T07:18:46Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439814#M68466 <P>Hello @vishaltaneja07011993 </P> <P><STRONG>My environment is</STRONG><BR /> Splunk Enterprise (Single Instance) install on Windows Werver 2012 R2 and install Splunk Add-on for Check Point OPSEC LEA already.<BR /> I can use this Splunk Server to collect log from Check Point via add parameter on Splunk Add-on for Check Point OPSEC LEA right?</P> <P>Or i need to install Universal forwarder on Linux OS and install Splunk Add-on for Check Point OPSEC LEA after that i will collect log via Universal forwarder?</P> <P>Thank you</P> Fri, 01 Feb 2019 07:47:00 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Collect-log-from-CheckPoint-OPSEC-Lea-to-Splunk-Enterprise/m-p/439814#M68466 mindterrian 2019-02-01T07:47:00Z