Introduction
The tags beginning with casb.paloalto identify events generated by CASB Netskope.
Valid tags and data tables
The full tag must have 4 levels. The first two are fixed as casb.paloalto. The third level identifies the type of events sent.
Technology | Brand | Type | Subtype |
|---|---|---|---|
casb | paloalto |
|
These are the valid tags and corresponding data tables that will receive the parsers' data:
Tag | Data table |
|---|---|
casb.netskope.alert | casb.netskope.alert |
casb.netskope.application | casb.netskope.application |
casb.netskope.audit | casb.netskope.audit |
casb.netskope.client | casb.netskope.client |
casb.netskope.infrastructure | casb.netskope.infrastructure |
casb.netskope.network | casb.netskope.network |
casb.netskope.page | casb.netskope.page |
How is the data sent to Devo?
Logs generated by CASB Netskope are forwarded to Devo using a dedicated collector. Contact us if you need to forward these events to your Devo domain so we can guide you through the process.