topic Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows? in All Apps and Add-ons

Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

richnavis — Mon, 08 Apr 2013 21:39:00 GMT

We currently are 100% windows shop, would like to know if there is a Splunk OPSEC LEA for Check Point Technology Add-on that we can run on windows.

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

dart — Mon, 15 Apr 2013 13:23:09 GMT

The Checkpoint app is only available for Linux & Solaris.

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

araitz — Mon, 15 Apr 2013 17:28:05 GMT

That is correct, as of version 2.0.x there is no Windows version. We have an enhancement request for Windows support. If other customers want it, this is the place to comment with your details.

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

richnavis — Thu, 02 May 2013 21:11:08 GMT

We are now a 99.2% windows shop.. 🙂

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

christantoy — Sat, 05 Oct 2013 06:45:34 GMT

Hi To all/Splunking

Reviving this thread lol

in our current situation we are really need a opsec windows platform

Thanks
Cris

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

raviefh — Mon, 21 Jul 2014 21:59:51 GMT

We need Opsec LEA Client for windows ASAP.

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

kheli — Tue, 23 Sep 2014 06:36:03 GMT

Latest Splunk Add-on for OPSEC LEA still does not support Windows platform. Can we get Windows add-on release? Not all Splunk instances are installed in Linux/Solaris. This is very important as the Windows version has old fw1-loggrabber binary which does not collect all required fields from Check Point log server especially if the logs are generated by Check Point VSX firewall.

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

araitz — Wed, 24 Sep 2014 04:23:17 GMT

Right now we have no plans to create a Windows version of the add-on.

A reminder that the source code is available here for anyone feeling ambitious: https://github.com/splunk/opsec_lea

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

hepterida — Thu, 07 May 2015 08:39:28 GMT

Hi Araitz,
we absolutely need it too 🙂
Thanks you, Kamil

Re: Is there a Splunk OPSEC LEA for Check Point Technology Add-on that runs on Windows?

ashokqos — Wed, 20 Jan 2016 13:26:33 GMT

We have created an alternate option where you can analyze checkpoint logs via syslog. This add-on will help you analyze Check Point logs on Windows.

https://splunkbase.splunk.com/app/2996/

I will be very happy to help anyone who is facing any issue with this Add-On.

Thanks