https://community.splunk.com/t5/Getting-Data-In/OPSEC-LEA-add-on/m-p/49109#M9334 <P>I recieve debug output. Where i can open support case?</P> Thu, 30 May 2013 10:11:51 GMT stln_sergey 2013-05-30T10:11:51Z https://community.splunk.com/t5/Getting-Data-In/OPSEC-LEA-add-on/m-p/49107#M9332 <P>I configured OPSEC LEA add-on on my Splunk server (ubuntu). Established a connection with Check Point management, but in manage connection, in "connection field" appears Never Connrcted. And no log indexed in Splunk.</P> Wed, 29 May 2013 14:10:50 GMT https://community.splunk.com/t5/Getting-Data-In/OPSEC-LEA-add-on/m-p/49107#M9332 stln_sergey 2013-05-29T14:10:50Z https://community.splunk.com/t5/Getting-Data-In/OPSEC-LEA-add-on/m-p/49108#M9333 <P>you can try debugging the OPSEC input to determine if there are any obvious errors using this command:</P> <PRE><CODE> /opt/splunk/bin/splunk cmd /opt/splunk/etc/apps/Splunk_TA_opseclea_linux22/bin/lea-loggrabber-debug.sh </CODE></PRE> <P>however, the debug output is very verbose, so you may want to open a Support case for expert advice. </P> Wed, 29 May 2013 17:55:28 GMT https://community.splunk.com/t5/Getting-Data-In/OPSEC-LEA-add-on/m-p/49108#M9333 Chubbybunny 2013-05-29T17:55:28Z https://community.splunk.com/t5/Getting-Data-In/OPSEC-LEA-add-on/m-p/49109#M9334 <P>I recieve debug output. Where i can open support case?</P> Thu, 30 May 2013 10:11:51 GMT https://community.splunk.com/t5/Getting-Data-In/OPSEC-LEA-add-on/m-p/49109#M9334 stln_sergey 2013-05-30T10:11:51Z