Check Point Add On for Splunk via syslog - LEA Alternative -By QOS

Our objective is to create an Add On for Check Point logs which is closest to LEA format. We developed Check Point Analytics App on Splunk (https://splunkbase.splunk.com/app/2844/) which was an immediate hit and crossed more than 100 downloads in few weeks. Many customers could not use our app as the basic requirement for running our App was LEA client which runs only on Linux Operating Systems. Our Check Point App won Splunk Revolution award as Splunk Conf 2015 @ Las Vegas. This motivated us to develop a new Add-on for Splunk. This Add-on will receive Check Point Tracker logs in syslog format and convert the same into LEA format so that our Analytics App can run smoothly on Windows as well. There is another advantages of using this Add-on, Sending syslog to Splunk is less complicated compared to configuring LEA client. As syslogs are in clear text format please make sure your Splunk Enterprise and Check Point Management/Log server are placed in secure zone.