Does anyone know of a good way to debug problems with the checkpoint lea client? I've been having trouble getting my configured.
asked 08 Nov '11, 09:57
Yes! you'll want to add a shell variable that calls OPSEC debugging when the lea_loggrabber client is called. First, set the OPSEC debug level:
Then run the splunk lea_loggrabber.sh script manually:
The debug output is very verbose so you may want to send the output to a file for splunk support to review.
If you need to dive deeper into the problem, on the Checkpoint Manager you can also enable OPSEC debugging.
The debug file is located at $FWDIR/log/fwm.elg
To stop the FWM debug, execute: