Syslog - Zscaler Nano Streaming Service
Device Details
Device Name | Syslog - Zscaler Nano Streaming Service |
Vendor | Zscaler |
Device Type | N/A |
Supported Model Name/Number | N/A |
Supported Software Version | N/A |
Collection Method | Syslog |
Configurable Log Output | N/A |
Log Source Type | Syslog - Zscaler Nano Streaming Service |
Log Processing Policy | LogRhythm Default V 2.0 |
Exceptions | N/A |
Additional Information | https://help.zscaler.com/zia/nss-feed-output-format-web-logs |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
Type | Product Version | Supported Schema Fields |
---|---|---|
V 2.0 DNS Log Events | N/A | <login>, <domainorigin>, <action>, <policy>, <url>, <dport>, <milliseconds>, <sip>, <dip>, <subject>, <dname> |
V 2.0 Firewall Log Events | N/A | <login>, <domainorigin>, <dport>, <sport>, <sip>, <dip>, <action>, <object>, <protname>, <subject>, <bytesin>, <bytesout>, <milliseconds>, <quantity>, <policy>, <threatname> |
V 2.0 Tunnel Log Events | N/A | <action>, <object>, <sip>, <dip>, <sport>, <bytesout>, <bytesin>, <packets> |
V 2.0 Web Log Events | N/A | <login>, <domainorigin>, <dname>, <dip>, <sip>, <dnatip>, <url>, <useragent>, <protname>, <action>, <tag1>, <reason>, <objectname>, <object>, <size>, <status>, <threatname>, <severity>, <vendorinfo>, <command>, <responsecode>, <version>, <group>, <tag2>, <objecttype>, <sname>, <login> |
Revision History
KB Version | Log Type | Change Type | Details |
---|---|---|---|
KB 7.1.673.0 | Syslog - Zscaler Nano Streaming Service | New Log Source Optimization (LSO) policy: LogRhythm Default v2.0 | Optimized new log processing policy for Syslog - Zscaler Nano Streaming Service. |