I am using souretype cisco:wsa:squid, however I tried all the cisco:wsa:w3c as well, no luck so far? No sure where am I doing wrong?
as a result of this the Cisco Enterprise Suite --> web security dashboard are not working.
Sample Logs :
Nov 14 16:04:48 WSA_HOSTNAME Splunk_AccLogs: Info: 1542200692.909 119540 172.31.40.103 TCP_MISS/200 6542 CONNECT tunnel://nexus.officeapps.live.com:443/ - DIRECT/nexus.officeapps.live.com - PASSTHRU_WEBCAT_7-DefaultGroup-
IDN_NON_AUTHENTICATED-NONE-NONE-NONE-DefaultGroup-NONE -
... View more