All Apps and Add-ons

Check Point System Monitoring

usukhbayar_g
Loves-to-Learn

Hello,  I tasked to create dashboard on Splunk that shows Check Point Firewall system information.

Is there any way that Splunk can display Check Point Firewall system information? Such as CPU, memory, traffic rate also hardware sensors (if possible). We use Check Point app for Splunk. But looks like it has no information related to system info.

I don't even know if Check Point Firewall creates logs of this kind of information. Below screenshots are from Smart Console. 
Splunk Enterprise 9.3.1
Check Point Firewall R81.20

Any ideas would be appreciated.

usukhbayar_g_0-1738896645783.png

usukhbayar_g_1-1738896706578.png

 

 

Labels (3)
0 Karma

kiran_panchavat
SplunkTrust
SplunkTrust

@usukhbayar_g Check Point Firewalls do generate logs, but they primarily focus on security events and traffic data rather than detailed system information like CPU, memory usage, or hardware sensors. You should check if your firewall is logging these system details. Please check this document how to enable those logs to be monitored. 

https://community.checkpoint.com/t5/Security-Gateways/Monitoring-RAM-and-CPU-usage/td-p/144877 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...