All Apps and Add-ons

App for McAfee Web Gateway 3.05: How to import MWGaccess3.log?

tungttt
New Member

I installed the App for McAfee Web Gateway 3.05 in Splunk Web
I install "MWGaccess3_for_MWG7.3-7.4" in log handler Web gateway and receiver MWGaccess3.log, but I don't know to import MWGaccess3.log to the McAfee Web Gateway app. All it displays is "no results found"

Please help me. tks all.
here is error

alt text

0 Karma

thaneeshraane
New Member

Hackercombat Web security Gateway works using auto-containment technology, which involves running unknown files in a virtual container n the user's endpoint and analyzing the files there itself.

0 Karma

PavelP
Motivator

Hi tungttt,

you have to configure log input in splunk so that splunk can "read" and "index" logs which were created on the MWG. Read the README.html which included in the application package for examples with screenshots.

best regards
Pavel

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...