Splunk® Supported Add-ons

Splunk Add-on for Symantec Blue Coat ProxySG and ASG

Download manual as PDF

Download topic as PDF

Sourcetypes for the Splunk Add-on for Symantec Blue Coat ProxySG

The Splunk Add-on for Symantec Blue Coat ProxySG has two predefined source types. Use the one that matches the way you are ingesting your Blue Coat ProxySG data.

Sourcetype Event type Collection method Limitations CIM compliance
bluecoat:proxysg:access:syslog web, proxy TCP or UDP Logs should be unmodified from the default bcereportermain_v1 format. Network Traffic, Web
bluecoat:proxysg:access:file web, proxy File monitoring No limitations. Custom fields and field ordering supported. Network Traffic, Web
bluecoat:proxysg:access:kv web, proxy TCP No limitations. Network Traffic, Web
PREVIOUS
Splunk Add-on for Symantec Blue Coat ProxySG
  NEXT
Release notes for the Splunk Add-on for Symantec Blue Coat ProxySG

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters