Splunk for Blue Coat

noun

A Splunk app that provides search, alerting and reporting for large-scale Blue Coat environments. The Splunk for Blue Coat app includes pre-defined searches, reports and dashboards for Traffic Analysis, Bandwidth Reporting, Security Investigations and User Behavior.

For more information

On Splunkbase:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time