RSA Admin

Import multiple Check Point logs from "unconnected" devices

Discussion created by RSA Admin Employee on Sep 8, 2008
Latest reply on Jan 28, 2016 by David Poirier
Hi. Our customer would like to import several different CheckPoint logs to produce special reports for those endusers. I've tried to setup this with LEAREAD but i get some errormessages;

E:\nic\3700\RSA-TT-ES\bin>learead -n lier-everk-fw -f d:\lier-everk-fw-28Aug2008.log
failed to start OPSEC session to read d:\lier-everk-fw-28Aug2008.log

E:\nic\3700\RSA-TT-ES\bin>learead -n -t lier-everk-fw -f d:\lier-everk-fw-28Aug2008.log
Unable to create OPSEC environment

I've tried both with or without a LEAREAD-device for my ip (lier-everk-fw) services restarted (even the appliance) anyone who can point me in the right direction? tx SJ
Message Edited by steinarj on09-08-200803:43 PM
Message Edited by steinarj on09-08-200803:44 PM

Its a 1060 and version 3.7
Message Edited by steinarj on09-08-200803:45 PM