topic Import Forcepoint CASB CEF files into Splunk in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Import-Forcepoint-CASB-CEF-files-into-Splunk/m-p/516801#M87463 <P>What is the best practice of importing CEF files into Splunk, retrieved from Forcepoint CASB's siem tool?&nbsp; We have a Windows server that is downloading the cef files from Forcepoint CASB into into its local directories.&nbsp; We have a Splunk universal forwarder installed on this server as well.&nbsp;&nbsp; We also have a heavy forwarder, search head and three indexers running 8.0.5.</P> Fri, 28 Aug 2020 20:06:52 GMT mlmcadams 2020-08-28T20:06:52Z Import Forcepoint CASB CEF files into Splunk https://community.splunk.com/t5/Getting-Data-In/Import-Forcepoint-CASB-CEF-files-into-Splunk/m-p/516801#M87463 <P>What is the best practice of importing CEF files into Splunk, retrieved from Forcepoint CASB's siem tool?&nbsp; We have a Windows server that is downloading the cef files from Forcepoint CASB into into its local directories.&nbsp; We have a Splunk universal forwarder installed on this server as well.&nbsp;&nbsp; We also have a heavy forwarder, search head and three indexers running 8.0.5.</P> Fri, 28 Aug 2020 20:06:52 GMT https://community.splunk.com/t5/Getting-Data-In/Import-Forcepoint-CASB-CEF-files-into-Splunk/m-p/516801#M87463 mlmcadams 2020-08-28T20:06:52Z