You will need this one-time password when you create an OPSEC LEA connection in the add-on. Be sure to take note of the one-time password you enter. Create the OPSEC application certificateĬreate an OPSEC application certificate in the Check Point SmartDashboard. See certificate authority not found error. Consult the Check Point documentation for more information about creating an OPSEC application.ĭo not use hyphens in OPSEC App name.
(You can use any name but SplunkLEA is recommended by convention.) When configuring the host, select or create the Splunk host on which the Splunk Add-on for Check Point OPSEC LEA is being installed for data collection, usually a forwarder. Name the new OPSEC application SplunkLEA.
You need to perform configuration in Check Point OPSEC LEA before you can collect OPSEC LEA data with the Splunk Add-on for Check Point OPSEC LEA.Ĭreate the Splunk OPSEC application using the Check Point SmartDashboard or the desired CMA/Domain on Provider-1. Configure OPSEC LEA to send data to the Splunk platform
