All Apps and Add-ons

Checkpoint OPSEC LEA Add-On 4.3.1 "origin_sic_name=XXXX" not in the traffic log anymore


After upgrade of the app to 4.3.1 I notice that I don't have in trafic log the info about originsicname=
For the sourcetype=opsec (for the other sourcetype, I have the info in the log)
The field I used to ID wich firewall log it belonged to in the setup of a cluster.

where is this log tag gone ? how to reactivate it ?


Path Finder

the same for me. Since last update, the originsicname doesn't appear anymore.
Probable there was a change in eventgen.conf since last update (?).

0 Karma