cancel
Showing results for 
Search instead for 
Did you mean: 
chelsea2017
Level 7

Checkpoint Firewall Log is not showing on LEM Console properly

We are trying to capture checkpoint FW allow/deny firewall traffic logs on LEM. I have successfully added the node & configured the connector Checkpoint 600 Appliances (auth.log) However when i create a filter under Monitor , it shows EventInfo as "Unmatched auth UUid data , but under ExtraneousInfo it shows the correct log.

0 Kudos
3 Replies
jrouviere
Level 14

Re: Checkpoint Firewall Log is not showing on LEM Console properly

You'll want to follow this process:

Success Center

0 Kudos
bambarit
Level 9

Re: Checkpoint Firewall Log is not showing on LEM Console properly

do you have update for this case?

0 Kudos
Highlighted
jrouviere
Level 14

Re: Checkpoint Firewall Log is not showing on LEM Console properly

Unmatched Data is pretty much going to be the same procedure every time it's encountered and regardless of vendor, etc.

Firstly, make sure you have the latest connectors applied.

If that doesn't resolve the issue, get an export of the logs and reach out to Support.

See the above article for the specifics.

0 Kudos