1 - Zscaler Nanolog Streaming Service
To onboard such an appliance to Axoflow, complete the generic appliance onboarding steps.
Labels
Axoflow automatically adds the following labels to data collected from this source:
| label | value |
|---|---|
| vendor | zscaler |
| product | nss |
Sending data to Splunk
When sending the data collected from this source to Splunk, Axoflow uses the following sourcetype and index settings:
| sourcetype | index |
|---|---|
| zscalernss-alerts | netops |
| zscalernss-tunnel | netops |
| zscalernss-web | netproxy |
| zscalernss-web:leef | netproxy |
Tested with: Zscaler Technical Add-On for Splunk
2 - Zscaler Log Streaming Service
To onboard such an appliance to Axoflow, complete the generic appliance onboarding steps.
Labels
Axoflow automatically adds the following labels to data collected from this source:
| label | value |
|---|---|
| vendor | zscaler |
| product | lss |
Sending data to Splunk
When sending the data collected from this source to Splunk, Axoflow uses the following sourcetype and index settings:
| sourcetype | index |
|---|---|
| zscalerlss-zpa-app | netproxy |
| zscalerlss-zpa-audit | netproxy |
| zscalerlss-zpa-auth | netproxy |
| zscalerlss-zpa-bba | netproxy |
| zscalerlss-zpa-connector | netproxy |
Tested with: Zscaler Technical Add-On for Splunk