To onboard such an appliance to Axoflow, complete the generic appliance onboarding steps.
Labels
Axoflow automatically adds the following labels to data collected from this source:
| label | value |
|---|---|
| vendor | zscaler |
| product | nss |
Sending data to Splunk
When sending the data collected from this source to Splunk, Axoflow uses the following sourcetype and index settings:
| sourcetype | index |
|---|---|
| zscalernss-alerts | netops |
| zscalernss-tunnel | netops |
| zscalernss-web | netproxy |
| zscalernss-web:leef | netproxy |
Tested with: Zscaler Technical Add-On for Splunk