On our heavy forwarder with the Splunk Add-on for Check Point OPSEC LEA one of the connections to the firewall is always on 95%+, the logging of the firewall behind that connection is also behind between 5-30 minutes during the day (slowly lags behind further during the day).
Is there a way to make the python script for the LEA loggrabber to use more than 1 CPU or another way to fix the logging going behind so far?
Thanks in advance for responses.