OPSEC/LEA data source parameters for Check Point

If the QRadar® product does not automatically detect the data source, add a Check Point data source in the QRadar product by using the OPSEC/LEA connector.

When using the OPSEC/LEA connector, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect OPSEC/LEA events from Check Point:

Table 1. OPSEC/LEA data source parameters for the Check Point data source type
Parameter	Value
Data source type	Check Point
Connector type	OPSEC/LEA
Data source identifier	Type the IP address or host name for the log source as an identifier for events from your Check Point devices.

For a complete list of OPSEC/LEA connector parameters and their values, see OPSEC/LEA connector configuration options.

For more information about adding a data source in the QRadar product, see Adding ingestion data sources.