Skip to main content

to restart the netskope service so that it sends the events to the Qradar Siem, what would be the command or the options?

The easiest way to get logs from Netskope into a SIEM is using Cloud Log Shipper within Cloud Exchange.  Configure the Netskope Plugin for Log Shipper - Netskope Knowledge Portal


@xavy2310 do you already have Cloud Log Shipper configured?  A restart of the service should not be required unless there's an issue.  Once you've configured the plugin and sharing (business rules) then logs should begin streaming to the QRadar instance. 


Reply