WGCS log integration with Microsoft Cloud App

[StanPZ]

Hi All,

Do you have some experience in integration of WGCS logs with MS Cloud App - we got a customer who wants to integrate all logs in one place. Basically i know the general process via REST API PowerShell or Bash pull script, but what are the next steps and does anybody has full overview what changes should be done on MS side. I'm not sure if Microsoft will recognize this logs without additional parser and do we need a Log Collector as per their KB:

https://docs.microsoft.com/en-us/cloud-app-security/set-up-cloud-discovery

Thank you!

[Niks · Accepted solution]

Hi @StanPZ ,

Microsoft Cloud App connecter uses Syslog service to receive data/log If my understanding is correct.

You can use the new logging tool to send logs to the Syslog server.

The Logging Client is a Windows app that collects debug and error log files that you can use for investigations or analysis with Unified Cloud Edge or Web Gateway Cloud Service in situations where an organization is using Cloud ePO.

The app can also be used to archive MVISION Unified Cloud Edge web access data in your network or feed it directly in to your reporting or analytics tools.

The Logging Client automatically crawls logs at an interval you set. Depending on your needs, you can have logs saved to a folder on your local computer, or you can have them automatically sent to a syslog server.

You can download the tool from

https://www.mcafee.com/content/enterprise/en-in/downloads/my-products/listing.html

Regards,

Nikhil

[StanPZ]

Thank you Niks - it's working fine!

[Ten]

Hi Nikhil,

We would like to have this tool but it seems like not being available anymore. 

When I click the link to download the product, it's empty.

Could you let me know where we can download the tool please?

Thank you in advance,

AG