Splunk Enterprise

How to integrate Checkpoint and TrendMicro with Splunk light?

Isaor
New Member

Hello,

I am trying to integrate a checkpoint and TrendMicro tool, but when configuring this via syslog and opsec, it doesn't appear in my forward management. How is it possible to integrate this in Splunk light?

0 Karma

skulk
Explorer

Hi,

about Check Point:

You need install Splunk Add-on for Check Point OPSEC LEA but it supported only by Heavy Forwarder (HW) only, so you need install HF, which will receive Check Point logs and then send them to your Splunk Light.

0 Karma

Isaor
New Member

Hi!!!!!!

Thanks for the answer, let me understand... i need to install a Universal Forwarder in the checkpoint and the add-on in my Splunk?.

The add-on was installed an configured in the splunk.

0 Karma

skulk
Explorer

1) You need install HW
2) then install CheckPoint add-on to HW
3) then configure you CheckPoint to send logs to HW
4) then configure HW to send logs to Splunk Light (you need add-on for extract fields in Splunk Light too)

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...