All Apps and Add-ons

Splunk Add-on for Check Point OPSEC LEA: Why is lea_loggrabber crashing?

shftleft
Engager

Running into an issue with the latest version of the Splunk Add-on for Check Point OPSEC LEA. Everything is configured and connects properly with the LEA connection, but when lea_loggrabber fires up, it crashes with the following error:

[ 21382 4152240960]@CIS-SPLUNKFWDW[18 Aug 12:26:24] PM_apply_default_dn: calling PM_policy_DN_conversion ..
[ 21382 4152240960]@CIS-SPLUNKFWDW[18 Aug 12:26:24] PM_apply_default_dn: finished successfully.
lea_loggrabber: ../sysdeps/unix/sysv/linux/getpagesize.c:32: __getpagesize: Assertion `_rtld_global_ro._dl_pagesize != 0' failed.
Aborted

Any ideas?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Looks like glibc bug? Patch your box see if that helps.

https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/672352

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...