Zscaler Nanolog Streaming Service
JSA can collect and categorize events from Zscaler Nanolog Streaming Service (NSS) log feeds that forward syslog event to JSA.
To collect syslog events, you must configure your Zscaler NSS with an NSS feed to forward TCP syslog events to JSA. JSA automatically discovers and creates log sources for syslog events that are forwarded from Zscaler NSS log feeds. JSA supports syslog events from Zscaler NSS V4.1.
To configure Zscaler NSS, complete the following tasks:
On your Zscaler NSS appliance, create a log feed for JSA.
On your JSA system, verify that the forwarded events are automatically discovered.
Supported Event Types for Zscaler NSS
The ZScaler NSS DSM for JSA collects information about web browsing events from Zscaler NSS installations.
Each Zscaler NSS event contains information on the action that is taken on the web browsing in the event category. For example, web browsing events can have a category that is allowed or blocked website traffic. Each event defines the website that was allowed or blocked and includes all of the event details in the event payload.