Getting Data In

Checkpoint system logs and field extraction

sebastianstruwe
Explorer

Hi,

I'm able to receive and extract firewall traffic data using the log exporter function.  But system messages (e.g. kernel warnings) are still using "normal" syslog. There is no field extraction for these logs. Did I miss something?

 

Best,

Sebastian

Labels (3)
0 Karma
Get Updates on the Splunk Community!

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...