on Jul 23, 2016This topic tells you what to check in Security Analytics to verify that you have configured Check Point Collection correctly.
Return to Procedures
You may need to verify that Check Point Collection is configured correctly, otherwise it won't work.
Procedure
The following figure illustrates how you can verify that Check Point collection is working from the Administration > Health & Wellness > Event Source Monitoring tab.
Access the Event Source Monitoring tab from the Administration > Health & Wellness view.
Find checkpointfw1 in the Event Source Type column.
Look for activity in the Count column to verify that Check Point collection is accepting events.
The following figure illustrates how you can verify that Check Point collection is working from the Investigation > Events view.
Access the Investigation > Events view.
Select the Log Decoder (for example, LD1) collecting Check Point events in the Investigate a Device dialog.
Look for a Check Point event source parser (for example, checkpointfw1)in the device.type field in the Details column to verify that Check Point collection is accepting events.