This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Zscaler appliances

1 - Zscaler Nanolog Streaming Service

Zscaler Nanolog Streaming Service: Cloud-based secure internet gateway that inspects traffic for threats and enforces policies.

To onboard such an appliance to Axoflow, complete the generic appliance onboarding steps.

Labels

Axoflow automatically adds the following labels to data collected from this source:

label value
vendor zscaler
product nss

Sending data to Splunk

When sending the data collected from this source to Splunk, Axoflow uses the following sourcetype and index settings:

sourcetype index
zscalernss-alerts netops
zscalernss-tunnel netops
zscalernss-web netproxy
zscalernss-web:leef netproxy

Tested with: Zscaler Technical Add-On for Splunk

2 - Zscaler Log Streaming Service

Zscaler Log Streaming Service: Provides secure remote access to internal apps without exposing them to the public internet.

To onboard such an appliance to Axoflow, complete the generic appliance onboarding steps.

Labels

Axoflow automatically adds the following labels to data collected from this source:

label value
vendor zscaler
product lss

Sending data to Splunk

When sending the data collected from this source to Splunk, Axoflow uses the following sourcetype and index settings:

sourcetype index
zscalerlss-zpa-app netproxy
zscalerlss-zpa-audit netproxy
zscalerlss-zpa-auth netproxy
zscalerlss-zpa-bba netproxy
zscalerlss-zpa-connector netproxy

Tested with: Zscaler Technical Add-On for Splunk