elastic / elastic/integrations

[forcepoint_web.logs] Add capability to receive Forcepoint logs over syslog

Open
#17,570 1 comment 0 reactions 0 assignees View on GitHub
Integration:forcepoint_web maintainer:Community needs:triage Team:Security-Service Integrations
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
2d 18h
Merged PRs (30d)
182

Description

### Integration Name

Forcepoint Web Security [forcepoint_web]

### Dataset Name

forcepoint_web.logs

### Integration Version

1.13.0

### Agent Version

9.2.5

### OS Version and Architecture

Elastic ECE

### User Goal

In the docs https://www.elastic.co/docs/reference/integrations/forcepoint_web there is a link which gives a 404 => https://www.websense.com/content/support/library/web/hosted/admin_guide/siem_script.aspx

Apparently the Log Export SIEM tool is discontinued and there is now a SIEM Integration Option which is able to send the logs over syslog. So please add a way to receive Forecepoint Web logs over syslog.

### Existing Features

Only Log Export SIEM tool is supported

### What did you see?

We can only use syslog, which is currently not supported

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.