Syslog - Forcepoint CASB

Device Details

Device Name	Syslog - Forcepoint CASB
Vendor	Forcepoint
Device Type	CASB
Supported Model Name/Number	N/A
Supported Software Version	N/A
Collection Method	Syslog
Configurable Log Output	CEF
Log Source Type	Syslog - Forcepoint CASB
Log Processing Policy	LogRhythm Default V 2.0
Exceptions	N/A
Additional Information	https://www.websense.com/content/support/library/casb/admin_guide/casb_admin_guide.pdf

(List of LR tags used to parse the log information for each message type)

Type	Product Version	Supported Schema Fields
Activity and Alert Events	N/A	<severity>, <action>, <policy>, <dip>, <account>, <session>, <size>, <status>, <subject>, <url>, <useragent>, <sip>, <login>, <objecttype>, <object>
Incident Events	N/A	<severity>, <action>, <status>, <policy>, <login>, <vendorinfo>, <quantity>
Catch All : Level 1	N/A	<severity>, <tag1>

KB Version	Log Type	Change Type	Details
KB 7.1.XXX.X	Syslog - Forcepoint CASB	New Device Documentation	N/A