The Zscaler Technical Add-On for Splunk takes events from Zscaler data sources and maps these to Splunk’s Common Information Model, this can be leveraged by Splunk Enterprise Security and and app leveraging the CIM Data Model, including the Zscaler App for Splunk This TA should be installed as per Splunk's guidelines on TA installation, e.g. http://docs.splunk.com/Documentation/ES/5.0.0/Install/InstallTechnologyAdd-ons Full App and TA Documentarian is available here --> https://community.zscaler.com/t/zscaler-splunk-app-design-and-installation-documentation/4728