Syslog - Forcepoint CASB CEF
Device Details
Device Name | Syslog - Forcepoint CASB CEF |
Vendor | Forcepoint |
Device Type | CASB |
Supported Model Name/Number | N/A |
Supported Software Version | N/A |
Collection Method | Syslog |
Configurable Log Output | CEF |
Log Source Type | Syslog - Forcepoint CASB CEF |
Log Processing Policy | LogRhythm Default V 2.0 |
Exceptions | N/A |
Additional Information | https://www.websense.com/content/support/library/casb/admin_guide/casb_admin_guide.pdf |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
Type | Product Version | Supported Schema Fields |
|---|---|---|
Activity and Alert Events | N/A | <severity>, <action>, <policy>, <dip>, <account>, <session>, <size>, <status>, <subject>, <url>, <useragent>, <sip>, <login>, <objecttype>, <object> |
Incident Events | N/A | <severity>, <action>, <status>, <policy>, <login>, <vendorinfo>, <quantity> |
Catch All : Level 1 | N/A | <severity>, <tag1> |
Revision History
KB Version | Log Type | Change Type | Details |
|---|---|---|---|
KB 7.1.XXX.X | Syslog - Forcepoint CASB CEF | New Device Documentation | N/A |