Splunk Add-on for Check Point OPSEC LEA | 5.0.0 | Spawning Hundreds of lea_loggrabber processes

[gstefancyk]

After upgrading to version 5.0.0 of the add on 100s of lea_loggrabber processes keep spawning and eventually lead to resource contention issues.

We need to pkill lea_loggrabber and restart splunk to get things working again. Then a couple of hours later we have multiple processes running again and if we let it go this easily goes into the couple hundreds.

Anyone have any solutions?

[HolgerConrad]

We just ran into the same problem after upgrading the checkpoint lea opsec app to 5.0. After a while the number of processes grows. Have you already found a solution for your problem ?