Zscaler ZIA web NSS

ZIA web proxy NSS fields using native Nanolog Streaming Service token names

JSON 0 fields Generator

zscaler zia nss web

Preview Sample View Schema

CLI Install

meltr templates install zscaler

Overview

What this event covers

Synthetic ZIA web transaction log using native NSS feed field names (cip, recordid, host, urlcat, action Allowed/Blocked, etc.) from Zscaler Nanolog Streaming Service documentation — not Splunk TA remaps (ClientIP, event_id, hostname, urlcategory).

When generated

›web transaction Allowed
›web transaction Blocked

Security relevance

Informational

Frequency notes

High-volume proxy traffic profile.

Resources

Docs and tools

NSS Feed Output Format — Web Logs reference General Guidelines for NSS Feeds and Feed Formats reference

Generation

Configuration

Base frequency: 2400 events/hour
Business hours: 1.0x
Night hours: 1.0x
Weekend: 1.0x

Schema

Field definitions

Field reference for this event type — types, requirements, examples, and allowed values.

No field definitions in meta.yaml