Device Details
|
Device Name |
Syslog - Forcepoint CASB CEF |
|
Vendor |
Forcepoint |
|
Device Type |
CASB |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output |
CEF |
|
Log Source Type |
Syslog - Forcepoint CASB CEF |
|
Log Processing Policy |
LogRhythm Default V 2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://www.websense.com/content/support/library/casb/admin_guide/casb_admin_guide.pdf |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
Activity and Alert Events |
N/A |
<severity>, <action>, <policy>, <dip>, <account>, <session>, <size>, <status>, <subject>, <url>, <useragent>, <sip>, <login>, <objecttype>, <object> |
|
Incident Events |
N/A |
<severity>, <action>, <status>, <policy>, <login>, <vendorinfo>, <quantity> |
|
Catch All : Level 1 |
N/A |
<severity>, <tag1> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.XXX.X |
Syslog - Forcepoint CASB CEF |
New Device Documentation |
N/A |