This TA for McAfee / Skyhigh Web Gateway works with the all available known sourcetypes for MWG/SWG: - mcafee:webgateway:custom - new optimized log format used by App for McAfee/SkyHigh Web Gateway (https://splunkbase.splunk.com/app/1654/) - mcafee:webgateway:default - default access log format produced by default MWG/SWG installation - mcafee:wg:kv - sourcetype used by Splunk Add-on for McAfee Web Gateway (https://splunkbase.splunk.com/app/3009) based on the same LogHandler configuration from an old version of https://splunkbase.splunk.com/app/1654/ - MWGaccess3 - sourcetype used by an old version of https://splunkbase.splunk.com/app/1654/ This Add-On intended to work with all beforementioned sourcetypes.