Device Details
|
Device Name |
Syslog - Zscaler Nano Streaming Service |
|
Vendor |
Zscaler |
|
Device Type |
N/A |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output |
N/A |
|
Log Source Type |
Syslog - Zscaler Nano Streaming Service |
|
Log Processing Policy |
LogRhythm Default V 2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://help.zscaler.com/zia/nss-feed-output-format-web-logs |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
V 2.0 DNS Log Events |
N/A |
<login>, <domainorigin>, <action>, <policy>, <url>, <dport>, <milliseconds>, <sip>, <dip>, <subject>, <dname> |
|
V 2.0 Firewall Log Events |
N/A |
<login>, <domainorigin>, <dport>, <sport>, <sip>, <dip>, <action>, <object>, <protname>, <subject>, <bytesin>, <bytesout>, <milliseconds>, <quantity>, <policy>, <threatname> |
|
V 2.0 Tunnel Log Events |
N/A |
<action>, <object>, <sip>, <dip>, <sport>, <bytesout>, <bytesin>, <packets> |
|
V 2.0 Web Log Events |
N/A |
<login>, <domainorigin>, <dname>, <dip>, <sip>, <dnatip>, <url>, <useragent>, <protname>, <action>, <tag1>, <reason>, <objectname>, <object>, <size>, <status>, <threatname>, <severity>, <result>, <vendorinfo>, <command>, <responsecode>, <version>, <group>, <tag2>, <objecttype>, <sname>, <login> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.673.0 |
Syslog - Zscaler Nano Streaming Service |
New Log Source Optimization (LSO) policy: LogRhythm Default v2.0 |
Optimized new log processing policy for Syslog - Zscaler Nano Streaming Service. |