All Apps and Add-ons

How to build: Forcepoint Email Security Add-on

ikulcsar
Communicator

Hi there,

Has anybody experience with Forcepoint (Websense) Email gateway log parsing (in order to process them with ES)?
Forcepoint has a docs: https://www.websense.com/content/support/library/email/v85/email_siem/siem_log_map.pdf

Currently, I try to use only "Policy" events to get all the field I needed, but it doesn't look perfect.

So can help somebody who is familiar with Forcepoint help me to build an addon?

Regards,
István

Tags (2)
0 Karma

mshakeb
Loves-to-Learn Lots

Hi ikulcsar,

i am looking for forcepoint Email Security Add-on, Hope you have successfully done the parsing (Add-on), Could you please help me in this
thanks

0 Karma

dkeck
Influencer

HI,

did you tried to TA on splunkbase? it might includes all the fields you need?

https://splunkbase.splunk.com/app/2966/

0 Karma

ikulcsar
Communicator

Hi,

Unfortunately that add-on for Web Security only. Web gateways have a very different (easier) logging style:( .

Regards,
István

0 Karma
Get Updates on the Splunk Community!

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...

Stay Connected: Your Guide to February Tech Talks, Office Hours, and Webinars!

💌Keep the new year’s momentum going with our February lineup of Community Office Hours, Tech Talks, ...