3 Replies Latest reply on Oct 17, 2016 1:31 AM by rajannaik

    Symantec DLP

    LT McGary

      Does anyone have Symantec DLP configured as a data source? If so, is it parsing correctly by default, or did you have to write a custom parser for it to parse correctly? I have it configure as a data source, but all events are showing "umknown" even though the data appears to be getting parsed. Support is telling me I need to either submit a PER or write a custom parser to correct this.

       

      DLP Event.PNG