Check Point App for Splunk
Splunk AppInspect Passed
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
Check Point brings you an advanced and real-time threat analysis and reporting tool for Splunk.
The Check Point App for Splunk allows you to respond to security risks immediately and gain network true insights.
You can collect and analyze millions of logs from all Check Point technologies and platforms across networks, Cloud, Endpoints and Mobile.
This app uses the Check Point Log Exporter to seamlessly send logs from your Check Point log server to your Splunk server.
For more details, see Check Point sk122323 - http://supportcontent.checkpoint.com/solutions?id=sk122323.
Main features include:
• Compatibility with Common Information Model (CIM)
• Compatibility with Splunk Enterprise Security
• Integrated with Check Point SmartEvent dashboards (e.g., General Overview, Threat Prevention and the new Cyber Attack View)
The Check Point App for Splunk allows you to respond to security risks immediately and gain network true insights.
You can collect and analyze millions of logs from all Check Point technologies and platforms across networks, Cloud, Endpoints and Mobile.
This app uses the Check Point Log Exporter to seamlessly send logs from your Check Point log server to your Splunk server.
For more details, see Check Point sk122323 - http://supportcontent.checkpoint.com/solutions?id=sk122323.
Main features include:
• Compatibility with Common Information Model (CIM)
• Compatibility with Splunk Enterprise Security
• Integrated with Check Point SmartEvent dashboards (e.g., General Overview, Threat Prevention and the new Cyber Attack View)
Documentation for Check Point App for Splunk is posted at Check Point Docs
Release Notes
Version 1.0.1
Jan. 17, 2019
Version 1.0.0
Nov. 13, 2018