Splunk Add-on for Check Point OPSEC LEA: Should I use loggrabber for version 4.1 of this add-on in order to establish a connection?

[skuma30]

Hi I'm trying to connect to the Check Point firewalls but some reason it is not connecting and not pulling logs from the Check Point. Should I use loggrabber for 4.1 version of the Splunk Add-on for Check Point OPSEC LEA? We are using loggrabber for old version of the add-on and pulling the logs. But in the latest version, I configured one of the Check Point connections, it is working but not all of them. Please help me through this. Thanks

[Yepeza]

The link below explains how to configure Checkpoint OPSEC Lea.

http://docs.splunk.com/Documentation/AddOns/released/OPSEC-LEA/Setup#Create_the_OPSEC_application_ce...

[apilger_splunk]

Are you using Splunk Add-on for Check Point OPSEC LEA (https://splunkbase.splunk.com/app/3197/) in the latest version?

[skuma30]

yes apilger.

[aaraneta_splunk]

@skuma30 - Are you using an app or add-on on Splunkbase? If yes, which one? Please let me know. I want to make sure your post is tagged correctly for best visibility.

[skuma30]

yes using the splunkbase addon https://splunkbase.splunk.com/app/3197/ this is the app that I'm facing the problems with.