IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Unknown log source - Checkpoint OPSEC

    Posted 09/03/19 01:02 AM
    I would like to collect a log from checkpoint via opsec protocol. I added log source and log source status is success but event name is unknown. Have you seen these problem? How I solve it?

     



    ------------------------------
    MAC Strater
    ------------------------------


  • 2.  RE: Unknown log source - Checkpoint OPSEC

    Posted 09/03/19 09:22 AM

    Hello.

    Try this extension.

    https://exchange.xforce.ibmcloud.com/hub/extension/2ab04201e22575e6b7323b8792d333e8



    ------------------------------
    Vadim Novikov
    SOC Engineer
    IT-Specialist
    Kiev
    +380972970792
    ------------------------------



  • 3.  RE: Unknown log source - Checkpoint OPSEC

    Posted 09/03/19 09:54 AM
    I download and install in JSA. What should I do next?

    ------------------------------
    MAC Strater
    ------------------------------

    Original Message


  • 4.  RE: Unknown log source - Checkpoint OPSEC
    Best Answer

    Posted 09/03/19 10:17 AM
    If problem doesn`t gone. Check event mapping on your Check Point DSM.

    ------------------------------
    Vadim Novikov
    SOC Engineer
    IT-Specialist
    Kiev
    +380972970792
    ------------------------------

    Original Message


Related Content