Hello,
I have an issue with Symantec Bluecoat Proxy SG when i index data to a heavy forwarder. The logs didn't parse correctly and the coverage is less than 5% of the total events, the sourcetype defined is bluecoat:proxysg:access:syslog.
What is the correct format of the log?.
An example of the log received is attached.
Thanks in advance.
