Zscaler - Managed log source

[shaeqahmed]

Add support for Zscaler logs to Matano.

Sources

1. Zscaler Internet Access logs (zscaler_zia)

Tables:

• alerts
• dns
• firewall
• tunnel
• web

2. Zscaler Private Access logs (zscaler_zpa)

Tables:

• audit
• browser_access
• user_activity
• user_status

Steps

• [ ] Implement all relevant parsers to ECS (proceses from ingest S3 bucket)
• [ ] Build a managed poller to automatically pull logs from Zscaler

[kai-ten]

Picking this up now!