TIBCO LogLogic LMI Configuring Checkpoint log collection with a dedicated Checkpoint Log Manager
book
Article ID: KB0075694
calendar_today
Updated On:
Products
Versions
TIBCO LogLogic Log Management Intelligence
All
Description
Checkpoint can be configured to log to a dedicated log management server but this requires some changes to the normal configuration of the Checkpoint collector within LogLogic LMI.
Resolution
In most Checkpoint scenarios the logs will reside on the Checkpoint management server. This would mean that the Checkpoint SIC and LEA IP are the same within the Checkpoint collector configuration within LogLogic LMI. Also within this setup you would not normally need to populate the LEA DN because the cert would populate this automatically.
In scenarios where there is a Checkpoint dedicated log management server the configuration variables will differ. The SIC IP should still be the Checkpoint manager where the OPSEC application is configured however the LEA IP and DN will now change to that of the Checkpoint management log server.
1. To find out the Checkpoint log management server DN you will need to obtain this from the Checkpoint Manager Gateways and Server Properties. 2. Select the Log Manager Gateway that has been configured as the dedicated log manager. 3. Once in the general properties click on the "Communication" button and then the "Test SIC Status". The DN will be displayed on the SIC Status page. This is the information that you will need to add to the LEA configuration within the LogLogic Checkpoint configuration.
Issue/Introduction
Checkpoint can be configured to log to a dedicated log management server but this requires some changes to the normal configuration of the Checkpoint collector within LogLogic LMI