All Apps and Add-ons

How to integrate the Blue Coat WSS app with Splunk?

shubham87
Explorer

We are using Blue Coat (now Symantec) Web security service in our environment. We have received Blue Coat WSS app for Splunk. But there is no documentation available for same. Has anyone succeeded in successfully integrating Splunk with Blue Coat WSS?

Thanks in advance.

Shubham

0 Karma

jfeitosa_real
Path Finder

Hi, Shubham.

You need to set up an "API Keys" in the WSS portal for Splunk to make the GET in the logs. In WSS go to the menu: Service> Account Maintenance> MDM, API Keys, click + add API Key and set a user / password, which must be used the same credentials to configure Add-on.

Follow the documentation link:
https://www.symantec.com/connect/articles/symantec-wss-app-splunk

Download and install the files as documentation.
Symantec Web Security Service App For Splunk
https://splunkbase.splunk.com/app/3855/

Symantec Web Security Service Addon For Splunk
https://splunkbase.splunk.com/app/3856/

Hope this helps.
James

0 Karma

mschlapfer
Explorer

Were you able to get this working?

0 Karma

shubham87
Explorer

Can anyone help on this?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...