All Apps and Add-ons

Splunk Add-on for Check Point OPSEC LEA: Why is lea_loggrabber crashing?

shftleft
Engager

Running into an issue with the latest version of the Splunk Add-on for Check Point OPSEC LEA. Everything is configured and connects properly with the LEA connection, but when lea_loggrabber fires up, it crashes with the following error:

[ 21382 4152240960]@CIS-SPLUNKFWDW[18 Aug 12:26:24] PM_apply_default_dn: calling PM_policy_DN_conversion ..
[ 21382 4152240960]@CIS-SPLUNKFWDW[18 Aug 12:26:24] PM_apply_default_dn: finished successfully.
lea_loggrabber: ../sysdeps/unix/sysv/linux/getpagesize.c:32: __getpagesize: Assertion `_rtld_global_ro._dl_pagesize != 0' failed.
Aborted

Any ideas?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Looks like glibc bug? Patch your box see if that helps.

https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/672352

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...