All Apps and Add-ons

Why did Splunk stopped logging and is throwing an error "ERROR: Invalid arg: invalid value for --last_record_location" in Splunk Add-on for Checkpoint OPSEC LEA?

rajanala
Path Finder

Using Splunk Add-on for Checkpoint OPSEC LEA version 4.3.0
Splunk Stopped logging
Receiving error ERROR: Invalid arg: invalid value for --last_record_location

0 Karma

georgen_splunk
Splunk Employee
Splunk Employee

try deleting the pointer file in the directory:

$SPLUNK_home/var/lib/splunk/modinputs/checkpoint_opseclea/

And restart HWF/splunkd

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!