We are trying to capture checkpoint FW allow/deny firewall traffic logs on LEM. I have successfully added the node & configured the connector Checkpoint 600 Appliances (auth.log) However when i create a filter under Monitor , it shows EventInfo as "Unmatched auth UUid data , but under ExtraneousInfo it shows the correct log.
↧