All Apps and Add-ons

App for McAfee Web Gateway 3.05: How to import MWGaccess3.log?

tungttt
New Member

I installed the App for McAfee Web Gateway 3.05 in Splunk Web
I install "MWGaccess3_for_MWG7.3-7.4" in log handler Web gateway and receiver MWGaccess3.log, but I don't know to import MWGaccess3.log to the McAfee Web Gateway app. All it displays is "no results found"

Please help me. tks all.
here is error

alt text

0 Karma

thaneeshraane
New Member

Hackercombat Web security Gateway works using auto-containment technology, which involves running unknown files in a virtual container n the user's endpoint and analyzing the files there itself.

0 Karma

PavelP
Motivator

Hi tungttt,

you have to configure log input in splunk so that splunk can "read" and "index" logs which were created on the MWG. Read the README.html which included in the application package for examples with screenshots.

best regards
Pavel

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...