Ask the community

SIEM

xavy2310
Partner
Partner

to restart the netskope service so that it sends the events to the Qradar Siem, what would be the command or the options?

2 Replies 2
matt-frank
Partner
Partner

The easiest way to get logs from Netskope into a SIEM is using Cloud Log Shipper within Cloud Exchange.  Configure the Netskope Plugin for Log Shipper - Netskope Knowledge Portal

sshiflett
Netskope
Netskope

@xavy2310 do you already have Cloud Log Shipper configured?  A restart of the service should not be required unless there's an issue.  Once you've configured the plugin and sharing (business rules) then logs should begin streaming to the QRadar instance. 


Sam Shiflett
Netskope Solution Architect - North America
Subscribe
Labels

In order to view this content, you will need to sign in to your account. Simply click the "Sign In" button below

Sign In