Download topic as PDF
Lookups for the Splunk Add-on for McAfee Web Gateway
The Splunk Add-on for McAfee Web Gateway has two lookups. The lookup files map fields from McAfee Web Gateway systems to CIM-compliant values in the Splunk platform. The lookup files are located in
$SPLUNK_HOME/etc/apps/Splunk_TA_mcafee-wg/lookups.
| Filename | Description |
|---|---|
mcafee_wg_action_info.csv
|
Maps McAfee Web Gateway block_id to action
|
mcafee_wg_httpstatus.csv
|
Maps McAfee Web Gateway status to status_description and status_type
|
Last modified on 08 February, 2022
|
PREVIOUS Troubleshoot the Splunk Add-on for McAfee Web Gateway |
NEXT Source types for the Splunk Add-on for McAfee Web Gateway |
This documentation applies to the following versions of Splunk® Supported Add-ons: released
Feedback submitted, thanks!