checkpoint endpoint security linux client

Result, object_category, tag, eventtype, tag::eventtype, object, direction, dvc_ip, object_id, change_type, dest_interface, status Object_category, session_id, direction, dvc_ip, object_id, user_type, object_attrs

Protection_type='URL reputation', protection_type='protection'Įvent_src, action, direction, dvc_ip, src_interface, protocol_version Success, 10.160.0.11, checkpoint:sessionsĮvent_src, file_path, bytes_out, direction, dvc_ip, bytes_in, src_interface, protocol_version Tag, app, event_src, eventtype, tag::eventtype, vendor_product, id, dest, authentication_method, dest_nt_domain, dvc, src_ip, dest_ip Product='Identity Awareness' AND identity_src='AD Query' Result, object_category, tag, session_id, event_src, eventtype, tag::eventtype, object, direction, dvc_ip, object_id, change_type, status, object_attrs Tag, eventtype, tag::eventtype, app, actionĬommunicate,network, cp_network_communicate, communicate,network, https, Log InĪuthentication, cp_auth_logs, authentication, Mobile Access Portal, success Session_id, event_src, direction, dvc_ip, protocol_version, authentication_method Product='Connectra' AND event_type='Login'

Session_id, event_src, packets_in, packets_out, bytes_out, direction, dvc_ip, bytes_in, dest_interface Product='Application Control' AND proto=* Enhanced extractions for bytes_in, bytes_out and packets_in, packets_out.Fixed extraction for event_action=' Detect', previously action was blocked now it will be allowed.Updated search query for cp_change and cp_change_audit event types for tracking accurate audit logs.Fixed extraction for file_path field of Malware DM.Log out logs will be tagged with Change DM instead of Authentication DM.Added support for 2 new DM: Inventory and Change Network.

Version 1.1.0 of the Splunk Add-on for Check Point Log Exporter is compatible with the following software, CIM versions, and platforms.Ĭheck Point Software R81 and R81.10, Check Point Endpoint client version E84.30 and E86.20, Check Point Management server version: R80.40, R81.10 See Release notes for the Splunk Add-on for Check Point Log Exporter. Version 1.1.1 of the Splunk Add-on for Check Point Log Exporter was released on January 12, 2023. Release history for Check Point Log Exporter

Checkpoint endpoint security linux client