events of checkpoint firewall

[yves emmanuel]

Hello, the configuration of rsyslog of checkpoint firewall has been done correctly.But i see the logs in archives  in wazuh server but not on the event on the dashboard wazuh.Can you help me

[Cedrick Foko]

Hello Yves,

Thank you for using Wazuh!

Your logs are being correctly received by the Wazuh server but not being displayed on the dashboard because they are not decoded. You must build custom decoders and rules to decode your logs and trigger alerts. 

You can find how to build custom decoders and rules in our documentation: 

Decoders Syntax - Ruleset XML syntax · Wazuh documentation

Rules Syntax - Ruleset XML syntax · Wazuh documentation

I hope you find this helpful.

Please don't hesitate to reach out to us if you face any other issue.

Cedrick