**NOTICE** Check Point has released their own app that handles the data. You should discontinue use of this TA and install the official app that is here: https://splunkbase.splunk.com/app/4293/ Please be aware that you will need to change the sourcetype to work with the official app. The Check Point CEF Add On For Splunk provides knowledge objects to allow for the Check Point Log Exporter to function within Splunk. This replaces the traditional method of using OPSEC LEA for collecting this data.