Check point related: are there any negative impacts to enabling this feature: loggrabber --no-resolve argument to turn object name resolution off?
More information about the function can be found here:
http://docs.splunk.com/Documentation/AddOns/released/OPSEC-LEA/Setup2