topic Re: where can i find the log ? in Splunk Search https://community.splunk.com/t5/Splunk-Search/where-can-i-find-the-log/m-p/78792#M19930 <P>All apps should have a README file in them that will take you through the install, setup and anything else you need to know. This app also has online documentation. <A href="http://docs.splunk.com/Documentation/OPSEC-LEA/latest/Install/Checklist">docs.splunk.com/Documentation/OPSEC-LEA/latest/Install/Checklist</A></P> <P>One thing I did notice with this app is they recommend installing ithe LEA-Loggrabber on a Lightweight forwarder and not a Universal forwarder so you can use the UI to configure it. If this is not possible for some reason, I'm sure any of the splunk partners would be able to reverse engineer the setup files and manually configure it for you.</P> Fri, 29 Mar 2013 11:23:00 GMT BobM 2013-03-29T11:23:00Z where can i find the log ? https://community.splunk.com/t5/Splunk-Search/where-can-i-find-the-log/m-p/78790#M19928 <P>I installed the add-on, but I have no idea where I can find the checkpoint log.</P> Fri, 29 Mar 2013 03:01:08 GMT https://community.splunk.com/t5/Splunk-Search/where-can-i-find-the-log/m-p/78790#M19928 fishlike 2013-03-29T03:01:08Z Re: where can i find the log ? https://community.splunk.com/t5/Splunk-Search/where-can-i-find-the-log/m-p/78791#M19929 <P><EM>Which</EM> add-on?</P> Fri, 29 Mar 2013 03:18:18 GMT https://community.splunk.com/t5/Splunk-Search/where-can-i-find-the-log/m-p/78791#M19929 sowings 2013-03-29T03:18:18Z Re: where can i find the log ? https://community.splunk.com/t5/Splunk-Search/where-can-i-find-the-log/m-p/78792#M19930 <P>All apps should have a README file in them that will take you through the install, setup and anything else you need to know. This app also has online documentation. <A href="http://docs.splunk.com/Documentation/OPSEC-LEA/latest/Install/Checklist">docs.splunk.com/Documentation/OPSEC-LEA/latest/Install/Checklist</A></P> <P>One thing I did notice with this app is they recommend installing ithe LEA-Loggrabber on a Lightweight forwarder and not a Universal forwarder so you can use the UI to configure it. If this is not possible for some reason, I'm sure any of the splunk partners would be able to reverse engineer the setup files and manually configure it for you.</P> Fri, 29 Mar 2013 11:23:00 GMT https://community.splunk.com/t5/Splunk-Search/where-can-i-find-the-log/m-p/78792#M19930 BobM 2013-03-29T11:23:00Z