https://community.splunk.com/t5/Getting-Data-In/Splunk-Add-on-for-Check-Point-Log-Exporter-not-parsing-log/m-p/708573#M117047 <P>Your problem description is a bit vague.</P><P>What do you mean by "not working"?</P><P>What does your ingestion process look like?</P><P>Have you set proper source types?</P><P>Does your linebreaking work properly? Timestamp recognition?</P><P>Do your events get any fields extracted or none at all?</P><P>Did you configure event export on the Checkpoint's side properly?</P> Mon, 13 Jan 2025 07:14:08 GMT PickleRick 2025-01-13T07:14:08Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Add-on-for-Check-Point-Log-Exporter-not-parsing-log/m-p/708569#M117046 <P>Hi, I have problem with parsing log in&nbsp;Splunk Add-on for Check Point Log Exporter. I have install it in both SH and HF, but log from checkpoint not parsing properly. I have try change REGEX to&nbsp;([a-zA-Z0-9_-]+)[:=]+([^|]+) and try to change DEPTH_LIMIT to 200000 like in troubleshooting said but it still not working.&nbsp;</P><P>Can you give me some advice?&nbsp;</P><P>Thank you so much !</P> Mon, 13 Jan 2025 06:06:10 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Add-on-for-Check-Point-Log-Exporter-not-parsing-log/m-p/708569#M117046 HoangAnhhh 2025-01-13T06:06:10Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Add-on-for-Check-Point-Log-Exporter-not-parsing-log/m-p/708573#M117047 <P>Your problem description is a bit vague.</P><P>What do you mean by "not working"?</P><P>What does your ingestion process look like?</P><P>Have you set proper source types?</P><P>Does your linebreaking work properly? Timestamp recognition?</P><P>Do your events get any fields extracted or none at all?</P><P>Did you configure event export on the Checkpoint's side properly?</P> Mon, 13 Jan 2025 07:14:08 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Add-on-for-Check-Point-Log-Exporter-not-parsing-log/m-p/708573#M117047 PickleRick 2025-01-13T07:14:08Z