Audit shows zero users and services on successful Zscaler log upload

book

Article ID: 184634

calendar_today

Updated On:

Products

CASB Security Standard CASB Security Premium CASB Security Advanced CASB Audit CASB Gateway CASB Gateway Advanced

Issue/Introduction

A SpanVA data source is created for a Zscaler NSS lookup, it successfully processes,  and when it is pulled up in audit there is no data for users and services

Cause

If you copy and paste the Feed Output Format in the NSS, found on page 2 of the Audit Support for ZScaler NSS, from the documentation it will keep the line breaks.

Resolution

  1. Remove the line breaks from the configuration of the NSS feed
  2. Delete the data source.
  3. Recreate the data source
Powered by Wolken Software