phCheckpoint process is down.7.1.3 Collector and SIEM What is it and why is it down?

[KarlH]

HI all,

I have not yet had the pleasure of working with phCheckpoint 

Is it needed on a 7.1.3 Collector talking to a 7.1.3 SIEM? are there any cases it can be ignored?

How can I get it going? and why does it not start?  which logs will yield the answer to these questions?

Please advise

Thank in advance, Karl

[premchanderr]

Hi @KarlH ,

If there is any error related to phCheckPoint or high utilization then the process would be down.

Check resource utilization and ensure no errors in installation. Temporary disable checkpoint from Admin > Setup > Pull Events or any logs. 

If its a new deployment with no logs, consider re-deploying the instance. 

I would suggest to open a ticket with Fortinet Support and provide logs for analysis.