Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Company Product / service Valid tags

-

Symantec ProxySG (formerly by Blue Coat Systems)

  • proxy.bluecoat.proxysg.bcreportermain_v1 +info
  • proxy.bluecoat.proxysg.leef +info
  • proxy.bluecoat.proxysg.main +info

Check more info about these parsers

Forcepoint proxy access logs 

  • proxy.forcepoint.access+info

Check more info about these parsers

-

HAProxy HTTP log format

  • proxy.haproxy.http

-

Cisco Web Security (formerly IronPort) using AsyncOS
Access log in Squid format

  • proxy.ironport.access.squid
-

Microsoft Forefront Threat Management Gateway (formerly Microsoft ISA Server)

  • proxy.isaserver.access-w3c-ab

McAfee Web Gateway 

  • proxy.mcafee.webgw.access-ab
  • proxy.mcafee.webgw.default

-

Squid caching proxy 

  • proxy.squid.access-clf.<serverHostname> +info
  • proxy.squid.access-combined.<serverHostname> +info
  • proxy.squid.access-lt.<serverHostname> +info
  • proxy.squid.access-squid.<serverHostname> +info
  • proxy.squid.access-squid-mime.<serverHostname> +info
  • proxy.squid.cache.<serverHostname> +info

Check more info about these parsers

-

stunnel TLS Proxy

  • proxy.stunnel.stdout

-

Varnish HTTP Cache

  • proxy.varnish.access-combined
  • proxy.varnish.access-combined-xff

VMware 

  • network.vmware.airwatch.events

Zscaler Internet Access (ZIA) 

  • proxy.zscaler.zia.alert +info
  • proxy.zscaler.zia.dns +info
  • proxy.zscaler.zia.firewall +info
  • proxy.zscaler.zia.saas_collaboration +info
  • proxy.zscaler.zia.saas_crm +info
  • proxy.zscaler.zia.saas_email +info
  • proxy.zscaler.zia.saas_file +info
  • proxy.zscaler.zia.saas_itsm +info
  • proxy.zscaler.zia.saas_repository +info
  • proxy.zscaler.zia.tunnel +info
  • proxy.zscaler.zia.web+info

Check more info about these parsers

Zscaler Secure Web Gateway log fields


  • proxy.zscaler.access +info
  • proxy.zscaler.nss +info
  • proxy.zscaler.nss_web.cef +info
  • proxy.zscaler.nss_firewall.cef+info

Check more info about these parsers