I am trying to integrate a checkpoint and TrendMicro tool, but when configuring this via syslog and opsec, it doesn't appear in my forward management. How is it possible to integrate this in Splunk light?
1) You need install HW
2) then install CheckPoint add-on to HW
3) then configure you CheckPoint to send logs to HW
4) then configure HW to send logs to Splunk Light (you need add-on for extract fields in Splunk Light too)