Hey Folkes Ingesting ZPA logs in Splunk using the Zscaler LSS service, I believe the configuration is correct based on the documentation, however the sourcetype is coming up as sc4s fallback and the logs are unreadable. It's confirmed that the logs are streaming to the HF. Can anyone who've done a similar configuration setup advise?  ... View more

Hey everyone, I'm doing testing regarding ingesting Zscaler ZPA Logs into Splunk using LSS, I'd like any assistance and any relevant configurations that could assist me. ... View more