Integration Checkpoint in FortiSIEM

[Waloo5]

Hi,

Please can you help to integrate checkpoint firewall to my FortiSIEM.

I have logs in my siem but it's unknown_EventType .

How can I parse thé logs?

[cdurkin_FTNT · Accepted solution]

Thank you.

So I believe the issue here is that we require syslog in CEF format.

The above sample is not CEF.

https://docs.fortinet.com/document/fortisiem/7.1.6/external-systems-configuration-guide/335430/check...

[Waloo5 · Accepted solution]

Hi,

I have an update of the issue

The error we made is not installing Database after configuration change in checkpoint.

Thank you @cdurkin_FTNT for your help.