Document toolboxDocument toolbox

cef0.forcepoint.security

Introduction

The table cef0.forcepoint.security identifies events in CEF format generated by Forcepoint Web Security.

Tag structure

Events in CEF format don't have a specific tag structure, as explained in Technologies supported in CEF syslog format. They are always sent to a table with the structure cef0.deviceVendor.deviceProduct.

In this case, the valid data tables are:

  • cef0.forcepoint.security

How is the data sent to Devo?

You can send your product logs to Devo using any of the available methods, for example using any Syslog drain or using the Devo In-house Relay. Learn more about how to configure Forcepoint web protection solutions to send logs here.

Learn more about CEF syslog format and how Devo tags these events in Technologies supported in CEF syslog format.