Hi,
We have recently migrated from LEA to checkpoint log exporter facility to collect Checkpoint firewall logs in CEF format.
Even after trying multiple props configuration, we still observe events breaking at irregular intervals.
Some events parse correctly at the start and end of the event and some in between or abruptly.
we even tried the splunk add-on - https://splunkbase.splunk.com/app/4180/
Does anyone have a working props?
