10-02-2017 10:03 AM - edited 03-08-2019 07:41 PM
We have customized our access logs following this guide (for Splunk):
https://www.splunk.com/blog/2016/10/14/splunk-cisco-web-security-appliance-wsa-bff-dear-it-admin-my-internet-is-so-slow.html
Is there any way that the Advanced Reporting console can pick up and display these customized fields?
There has to be a way since AWSR is based on Splunk anyway!!
Thanks in advance!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community