We Installed OPSEC LEA on RedHat to connect to CheckPoint 75.40. The app is enabled and connected. CheckPoint shows that trust is established, but Splunk shows "waiting for data" instead of showing it as a datasource. When running lea-loggrabber.sh (with crednetial) in debug 3 mode, I saw the following errors: DEBUG: OPSEC_SESSION_END_HANDLER called ERROR: SIC ERROR 119 - SIC Error for ssl_opsec: Client could not choose an authentication method for service ssl_opsec When manually running lea_loggrabber (with the SPLUNK_HOME variable set), after I log in, I see: splunkd request failed, 404: $PLUNK_HOME/bin/splunk _internal call /servicesNS/nobody/splunk_opseclea/opsec/log_status/1@ QUERYING: 'https://127.0.0.1:8089/servicesNS/nobody/splunk_opseclea/opsec/log_status/1@" FAILED: 'HTTP/1.1 404 Not Found' In handler 'log_status': Could not find object id=1@ The splunkd.log shows the following: ERROR ExecProcessor - message from "/opt/splunk/etc/apps/splunk_opseclea/bin/lea-loggrabber.sh --configentity CheckPoint" The opsec-entity-health.conf file shows is_connected = 0, so I assume that something is wrong with the connection. Anyone know how to solve the problem? ... View more