CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Results 1 to 2 of 2

Thread: Splunk Lea Client unable to fetch logs from Secondary Smart1-25 Manager (R77.30)

  1. #1
    Join Date
    2016-01-22
    Posts
    1
    Rep Power
    0

    Default Splunk Lea Client unable to fetch logs from Secondary Smart1-25 Manager (R77.30)

    Good day,

    I have an issue with Splunk Lea Client that is unable to fetch logs from Secondary Smart1-25 Manager (R77.30). The Splunk client can connect and authenticate(trust established) to the Secondary Manager but does not fetch the logs. The Primary Manager is down and not available.

    Did anyone experience this issue before.

    Thanks

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,668
    Rep Power
    13

    Default Re: Splunk Lea Client unable to fetch logs from Secondary Smart1-25 Manager (R77.30)

    Quote Originally Posted by sarish.amrithlall View Post
    Good day,

    I have an issue with Splunk Lea Client that is unable to fetch logs from Secondary Smart1-25 Manager (R77.30). The Splunk client can connect and authenticate(trust established) to the Secondary Manager but does not fetch the logs. The Primary Manager is down and not available.

    Did anyone experience this issue before.

    Thanks
    There isn't much to LEA connections. You basically set sic and then its up to the client application (Splunk in this case) to connect to the device (your secondary manager) and request logs. I would check to see if you see any tcp connections hitting the secondary. If not then you need to call Splunk and ask them why its not attempting.

Similar Threads

  1. unable to fetch suspicious activity rules
    By anakalem in forum SmartView Monitor
    Replies: 5
    Last Post: 2012-12-06, 16:24
  2. Unable to fetch Suspicious Activity Rule
    By cp-eng in forum SmartView Monitor
    Replies: 0
    Last Post: 2012-09-26, 10:18
  3. Installing a Secondary MDS Manager NGX
    By Yasushi Kono in forum Provider-1 (Multi-Domain Management)
    Replies: 3
    Last Post: 2006-12-01, 05:39
  4. How to Fetch logs from VSX?
    By blackberry in forum Provider-1 (Multi-Domain Management)
    Replies: 0
    Last Post: 2006-09-21, 03:07
  5. Unable to fetch module information with SmartUpdate
    By atbosco in forum SmartUpdate
    Replies: 1
    Last Post: 2005-09-28, 10:08

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •