Checkpoint Logs - and no OPSEC


Is there a way to grab logs from Checkpoint FW-1 without using OPSEC? Any suggestions will be appreciated ;).

0 Karma


Hi, I'm using 'fw log -l -n -p' to export the logs to a file. You'll need to setup a sourcetype as per to splunk understands the timestamp.

Take a look at 'fw log -h' for other options such as tailing the log which might be usable in a scripted input.

Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!