Hi, I have a Nanalog Streaming Service (NSS) from Zscaler that I have connected to Splunk.  The problem is it doesn't show any data on the dashboard. But if I look into 'search' , there is data. This is the feed output format I have configured on the Zscaler Admin Portal for my splunk feed : "%s{time}","%s{login}","%s{proto}","%s{eurl}","%s{action}","%s{appname}","%s{appclass}","%d{reqsize}","%d{respsize}","%s{urlclass}","%s{urlsupercat}","%s{urlcat}","%s{malwarecat}","%s{threatname}","%d{riskscore}","%s{dlpeng}","%s{dlpdict}","%s{location}","%s{dept}","%s{cip}","%s{sip}","%s{reqmethod}","%s{respcode}","%s{ua}","%s{ereferer}","%s{ruletype}","%s{rulelabel}","%s{contenttype}","%s{unscannabletype}","%s{deviceowner}","%s{devicehostname}","%s{keyprotectiontype}" Any suggestions on how I can further troubleshoot?   ... View more

Hi, I have a zscaler NSS connected to splunk. I've been running some tests to see how splunk reacts to change in DNS entries.  It seems that the hostname isnt changed in splunk. Can anyone help me on this? nssem1.clab.group is the old name. Thanks!  ... View more

Hi, I have a Zscaler NSS connected to splunk. I made a change in the dns entries so that my em1 (interface that is connected to splunk) has a different name. Ever since then, the logs have been coming out differently. It follows a different format.  How should I troubleshoot this? Thanks! ... View more

Hi, I've been trying to connect my Cloud NSS from Zscaler to Splunk. If it works and I get a Test 200 : OK, what should I expect to see in my splunk logs? How can I verify from splunk that the connectivity test worked? Thanks! Best Regards, Sara  ... View more

Hi, I'm currently tring to connect splunk with zscaler nss cloud, which are in different networks. I've typed in the public IP of my firewall and opened port 8089 in the zscaler admin portal and an error popped up saying : Test Connectivity failed : SSL Certs missing for SIEM Host (0). Where do I get/make this cert and where do I upload it? Thanks! ... View more

Hello, I'm trying to set up SNMP monitoring for my  Zscaler NSS  on splunk.  Does anyone know where I can get documentation or does anyone have any ideas how I can do this? Thanks! ... View more

Hi, I'm trying to set up Splunk for Zscaler Nanalog Streaming Service. In the input settings, I can't choose zscalernss. There's only ta_zscaler_api_zscaler_zia_configurations-too_small, ta_zscaler_api_zscaler_zpa_configurations-too_small, zscaler:zia:api, and zscaler:zpa:api. How should I go about this? Thanks! ... View more

Hello, I've been running splunk on VMware since March this year, which is connected to a pfSense. I recently checked on it and I'm not able to acces the web interface anymore (http://localhost:8000) I've been reading some posts about how some ports need to be opened. I'm not sure if I would have to do it on the pfSense since it was already working early on without needing to open the ports. How should I continue with the troubleshooting? Thanks! Best regards, Sara ... View more

Hi, is Splunk Enterprise still free after 60 days of free trial? Thanks! ... View more