Splunk® Supported Add-ons

Splunk Add-on for Symantec Blue Coat ProxySG and ASG

Sourcetypes for the Splunk Add-on for Symantec Blue Coat ProxySG

The Splunk Add-on for Symantec Blue Coat ProxySG has two predefined source types. Use the one that matches the way you are ingesting your Blue Coat ProxySG data.

Sourcetype Event type Collection method Limitations CIM compliance
bluecoat:proxysg:access:kv web, proxy TCP or SC4S No limitations. Web
bluecoat:proxysg:access:syslog web, proxy TCP or UDP Logs should be unmodified from the default bcereportermain_v1 format. Web
bluecoat:proxysg:access:file web, proxy File monitoring No limitations. Custom fields and field ordering supported. Web
Last modified on 15 September, 2022
Lookups for the Splunk Add-on for Symantec Blue Coat ProxySG   Release notes for the Splunk Add-on for Symantec Blue Coat ProxySG

This documentation applies to the following versions of Splunk® Supported Add-ons: released

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters