Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Checkpoint Firewall Log is not showing on LEM Console properly

We are trying to capture checkpoint FW allow/deny firewall traffic logs on LEM. I have successfully added the node & configured the connector Checkpoint 600 Appliances (auth.log) However when i create a filter under Monitor , it shows EventInfo as "Unmatched auth UUid data , but under ExtraneousInfo it shows the correct log.

0 Kudos
3 Replies
Level 10

do you have update for this case?

0 Kudos

Unmatched Data is pretty much going to be the same procedure every time it's encountered and regardless of vendor, etc.

Firstly, make sure you have the latest connectors applied.

If that doesn't resolve the issue, get an export of the logs and reach out to Support.

See the above article for the specifics.

0 Kudos
Level 14

You'll want to follow this process:

Success Center

0 Kudos