...
Source Port → any free port you can dedicate to the incoming events
Target Tag → the target tag depends on the method used to export the events (we recommend you to use the Check Point Log Exporter)
firewall.checkpoint.log_exporter.<group>
firewall.checkpoint.gaia.<group>
firewall.checkpoint.lea.<group>
firewall.checkpoint.fw.<group>
firewall.checkpoint.gaia_system.<group>
Check the Sent without syslog tag option.
...