Configure Websense DLP to send data to the Splunk Add-on for Websense DLP

To enable the Splunk Add-on for Websense DLP to collect data from Websense DLP, you need to configure the Websense Data Security Manager to send the events using syslog in the CEF format to the data collection node of your Splunk platform installation. For information on configuring syslog, see the "Configuring remediation" section on page 382 of Websense Data Security Manager Help at: http://www.websense.com/content/support/library/data/v78/help/Data%20Security%207.8.x.pdf.

Next, configure your data collection node to receive data from Websense DLP as described in "Configure inputs for the Splunk Add-on for Websense DLP".