Zscaler Private Access Sample Event Messages

Use these sample event messages to verify a successful integration with JSA.

Note:

Due to formatting issues, paste the message format into a text editor and then remove any carriage return or line feed characters.

Zscaler Private Access Sample Message when you use the Syslog Protocol

Sample 1: The following sample event message shows that a user is successfully authenticated in Zscaler Private Access (ZPA).

Table 1: Highlighted Fields in the Zscaler Private Access Event
JSA field name	Highlighted values in the event payload
Event ID	ZPN_STATUS_AUTHENTICATED
Event Category	ZPA User Status
Source IP	10.2.2.2
PreNat IP	10.2.3.4
Username	testuser2@domain.test
Device Time	Tue Apr 20 22:23:25 2021

Sample 2: The following sample event message shows that App Connector is successfully authenticated in ZPA.

Table 2: Highlighted Fields in the Zscaler Private Access Event
JSA field name	Highlighted values in the event payload
Event ID	ZPN_STATUS_AUTHENTICATED
Event Category	Connector Status
Source IP	192.168.2.2
PreNat IP	10.3.4.3
Device Time	Tue Apr 20 22:23:19 2021