Syslog - Skyhigh Cloud Access Security Broker CEF

Device Details

Device Name	Cloud Access Security Broker
Vendor	Skyhigh
Device Type	Security
Supported Model Name/Number	N/A
Supported Software Version	N/A
Collection Method	Syslog
Configurable Log Output	CEF
Log Source Type	Syslog - Skyhigh Cloud Access Security Broker CEF
Log Processing Policy	LogRhythm Default V 2.0
Exceptions	N/A
Additional Information	https://success.skyhighsecurity.com/Skyhigh_CASB/Skyhigh_Cloud_Connector/Cloud_Connector_Integrations/Cloud_Connector_SIEM_Integration/Cloud_Connector_SIEM_Integration_Formats

(List of LR tags used to parse the log information for each message type)

Type	Product Version	Supported Schema Fields
Anomalies Audit Log Messages	N/A	<vmid>, <vendorinfo>, <login>, <domainorigin>, <severity>, <objecttype>, <sessiontype>, <policy>, <objectname>, <result>, <parentprocessname>, <status>
Catch-All	N/A	<tag1>, <severity>
Dashboard Audit Log Messages	N/A	<vmid>, <vendorinfo>, <severity>, <login>, <domainorigin>, <object>, <objecttype>, <version>, <objectname>, <serialnumber>, <session>

KB Version	Log Type	Change Type	Details
KB 7.1.721.0	Syslog - Skyhigh Cloud Access Security Broker CEF	New Device Documentation	N/A