When is the new version of the Splunk Add-on for Check Point OPSEC LEA coming out?

[rpille_splunk]

Please share information about the new add-on when it becomes available!

[hjauch_splunk]

Version 4.0.0 contains significant performance improvements according to our internal testing. Would be good to hear if there is a noticeable improvement from a customer

[daubsi]

Indeed we noticed a tremendous performance increase when we reconfigured one CLM yesterday from using OPSEC LEA connector v3.3 to v4.0 The connector runs stable so far an we intend to migrate further 10 in the next and if all goes well all the > 100. Good work Splunk!

[lding_splunk]

Great, Thanks for the feedback.
Looking forward to any further comments or proposals to improve. Thanks!

[hjauch_splunk · Accepted solution]

Version 4.0.0 of the Splunk Add-on for Check Point OPSEC LEA has just been released today!

You can download it here: https://splunkbase.splunk.com/app/3197

You can find documentation here: http://docs.splunk.com/Documentation/AddOns/latest/OPSEC-LEA/About

This version supports Splunk Enterprise 6.4, Check Point R80, and the SHA256 certificate.

This version replaces the older version. If you have an older version, you must remove or disable the previous version of the add-on before installing the new version.

[aosso]

Up&Running!

Thanks 🙂

[daubsi]

Did you notice any performance improvements? We're experiencing lags when we pull a huge amount of different CLMs (>100) using the previous version 3.10.

[hjauch_splunk]

Good to hear!