<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Sourcetypes Definition with lea_opsec in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Sourcetypes-Definition-with-lea-opsec/m-p/16558#M2017</link>
    <description>&lt;P&gt;If I use lea_opsec to gather Checkpoint informations, I can define a simple data input for that.&lt;/P&gt;

&lt;P&gt;But if I get Logevents from multiple Checkpoint Devices via data input, how can I configure and distinguish between different devices as sources?&lt;/P&gt;

&lt;P&gt;Cheers,&lt;/P&gt;

&lt;P&gt;Christian&lt;/P&gt;</description>
    <pubDate>Wed, 30 Jun 2010 22:06:32 GMT</pubDate>
    <dc:creator>simuvid</dc:creator>
    <dc:date>2010-06-30T22:06:32Z</dc:date>
    <item>
      <title>Sourcetypes Definition with lea_opsec</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Sourcetypes-Definition-with-lea-opsec/m-p/16558#M2017</link>
      <description>&lt;P&gt;If I use lea_opsec to gather Checkpoint informations, I can define a simple data input for that.&lt;/P&gt;

&lt;P&gt;But if I get Logevents from multiple Checkpoint Devices via data input, how can I configure and distinguish between different devices as sources?&lt;/P&gt;

&lt;P&gt;Cheers,&lt;/P&gt;

&lt;P&gt;Christian&lt;/P&gt;</description>
      <pubDate>Wed, 30 Jun 2010 22:06:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Sourcetypes-Definition-with-lea-opsec/m-p/16558#M2017</guid>
      <dc:creator>simuvid</dc:creator>
      <dc:date>2010-06-30T22:06:32Z</dc:date>
    </item>
    <item>
      <title>Re: Sourcetypes Definition with lea_opsec</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Sourcetypes-Definition-with-lea-opsec/m-p/16559#M2018</link>
      <description>&lt;P&gt;Will recreate the question, trying to be more specific&lt;/P&gt;</description>
      <pubDate>Thu, 01 Jul 2010 18:02:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Sourcetypes-Definition-with-lea-opsec/m-p/16559#M2018</guid>
      <dc:creator>simuvid</dc:creator>
      <dc:date>2010-07-01T18:02:40Z</dc:date>
    </item>
  </channel>
</rss>

