Audit shows zero users and services on successful Zscaler log upload

Products

• CASB Security Standard
• CASB Security Premium
• CASB Security Advanced
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• Data Loss Prevention Cloud Package

Issue/Introduction

A SpanVA data source is created for a Zscaler NSS lookup, it successfully processes,  and when it is pulled up in audit there is no data for users and services

Cause

If you copy and paste the Feed Output Format in the NSS, found on page 2 of the Audit Support for ZScaler NSS, from the documentation it will keep the line breaks.

Resolution

1. Remove the line breaks from the configuration of the NSS feed
2. Delete the data source.
3. Recreate the data source