Check Point Log Sources

To collect log data from Check Point devices, you must set up LEA servers to foster log collection under Management > Check Point Configuration.

Log Export API (LEA) is used to retrieve and export VPN-1/ FireWall-1 Log data. Check Point Management Interface (CPMI) is used to provide a secure interface to the Check Point management server's databases.

For more information:

For more information about See
LogLogic support of Check Point TIBCO LogLogic® Log Configuration Guides for Check Point Management Station
Check Point LEA servers and CPMI protocols your Check Point documentation