https://community.splunk.com/t5/Getting-Data-In/Zscaler-ZPA-Log-stream-via-LSS-to-Splunk/m-p/748053#M118874 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/310974">@Bedrohungsjäger</a>&nbsp;</P><P>I would suggest checking out the ZScaler docs on ZPA logging to Splunk and Log Streaming Service (LSS) at&nbsp;<A href="https://help.zscaler.com/zpa/about-log-streaming-service" target="_blank">https://help.zscaler.com/zpa/about-log-streaming-service</A>&nbsp;which has detailed docs and videos, and also checkout the PDF deployment guide at&nbsp;<A href="https://help.zscaler.com/downloads/zscaler-technology-partners/operations/zscaler-and-splunk-deployment-guide/Zscaler-Splunk-Deployment-Guide-FINAL.pdf" target="_blank">https://help.zscaler.com/downloads/zscaler-technology-partners/operations/zscaler-and-splunk-deployment-guide/Zscaler-Splunk-Deployment-Guide-FINAL.pdf</A></P><P><span class="lia-unicode-emoji" title=":glowing_star:">🌟</span><SPAN>&nbsp;</SPAN><STRONG>Did this answer help you?</STRONG><SPAN>&nbsp;</SPAN>If so, please consider:</P><UL><LI>Adding karma to show it was useful</LI><LI>Marking it as the solution if it resolved your issue</LI><LI>Commenting if you need any clarification</LI></UL><P>Your feedback encourages the volunteers in this community to continue contributing</P> Mon, 16 Jun 2025 23:00:26 GMT livehybrid 2025-06-16T23:00:26Z https://community.splunk.com/t5/Getting-Data-In/Zscaler-ZPA-Log-stream-via-LSS-to-Splunk/m-p/748032#M118871 <P>Hey everyone, I'm doing testing regarding ingesting Zscaler ZPA Logs into Splunk using LSS, I'd like any assistance and any relevant configurations that could assist me.</P> Mon, 16 Jun 2025 19:26:36 GMT https://community.splunk.com/t5/Getting-Data-In/Zscaler-ZPA-Log-stream-via-LSS-to-Splunk/m-p/748032#M118871 Bedrohungsjäger 2025-06-16T19:26:36Z https://community.splunk.com/t5/Getting-Data-In/Zscaler-ZPA-Log-stream-via-LSS-to-Splunk/m-p/748053#M118874 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/310974">@Bedrohungsjäger</a>&nbsp;</P><P>I would suggest checking out the ZScaler docs on ZPA logging to Splunk and Log Streaming Service (LSS) at&nbsp;<A href="https://help.zscaler.com/zpa/about-log-streaming-service" target="_blank">https://help.zscaler.com/zpa/about-log-streaming-service</A>&nbsp;which has detailed docs and videos, and also checkout the PDF deployment guide at&nbsp;<A href="https://help.zscaler.com/downloads/zscaler-technology-partners/operations/zscaler-and-splunk-deployment-guide/Zscaler-Splunk-Deployment-Guide-FINAL.pdf" target="_blank">https://help.zscaler.com/downloads/zscaler-technology-partners/operations/zscaler-and-splunk-deployment-guide/Zscaler-Splunk-Deployment-Guide-FINAL.pdf</A></P><P><span class="lia-unicode-emoji" title=":glowing_star:">🌟</span><SPAN>&nbsp;</SPAN><STRONG>Did this answer help you?</STRONG><SPAN>&nbsp;</SPAN>If so, please consider:</P><UL><LI>Adding karma to show it was useful</LI><LI>Marking it as the solution if it resolved your issue</LI><LI>Commenting if you need any clarification</LI></UL><P>Your feedback encourages the volunteers in this community to continue contributing</P> Mon, 16 Jun 2025 23:00:26 GMT https://community.splunk.com/t5/Getting-Data-In/Zscaler-ZPA-Log-stream-via-LSS-to-Splunk/m-p/748053#M118874 livehybrid 2025-06-16T23:00:26Z