Configuring the Windows service
On the Windows host, configure the Windows service to send logs to Log Server.
To configure the Windows service:
- Install the WinEventToCPLog package from the Check Point Support Center.
- When the installation completes, restart the computer.
- Open a command prompt window and go to this location:
C:\Program Files\CheckPoint\WinEventToCPLog\R65\bin
On 64 bit computers the path starts with C:\Program files (x86)
.
- Run:
windowEventToCPLog -pull_cert
- Enter the IP address of the management server.
- Enter the name of the corresponding OPSEC Application object that you created in SmartConsole for the Windows events.
- Enter the Activation Key of the OPSEC object.
- Restart the Check Point Windows Event Service.