topic OPSEC LEA log collection in Getting Data In

OPSEC LEA log collection

cmacey — Fri, 01 Mar 2013 09:01:55 GMT

Hi,

Query over the OPSEC LEA log collection. Does the OPSEC add-on leave a copy of the logs on the CheckPoint provider-1 mgmt solution? All I can see is a reference to exporting logs, so have a slight concern it actually removes the logs altogether every time it connects/polls. I can't see reference in the configuration instructions to any options around this.

Thanks,

Charles

Re: OPSEC LEA log collection

dart — Wed, 06 Mar 2013 18:05:18 GMT

We are using the standard OPSEC LEA collection method for Checkpoint logs, essentially pulling a copy; other subscribers (such as Tracker) would not be affected.

Re: OPSEC LEA log collection

araitz — Tue, 09 Apr 2013 23:23:50 GMT

I can speak for version 2.0.0+. It does not remove the logs, just pulls a copy.