|Applies To||RSA Product Set: Security Analytics, NetWitness Logs & Network|
RSA Product/Service Type: Log Collector
RSA Version/Condition: 10.x, 11.x
OS Version: EL6, El7
|Issue||How to run the Check Point collection service from the command line for troubleshooting on an RSA Security Analytics or NetWitness Log Collector.|
The NwCheckpointProcess program is used by the NwLogCollector to collect events from Checkpoint servers using the OPSEC LEA API. It can also be used as a command-line utility to probe a Checkpoint server, verifying connectivity and debugging connection problems. The following is an example of the syntax:
There are some options to the NwCheckpointProcess that have no value. The presence of the option causes a configuration action. For example, to show the log files on the server, the following would be entered: NwCheckpointProcess --showlogs
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.
The text below is an example of the NwCheckpointProcess --help output.
|Legacy Article ID||a66617|