Log Streaming - Netskope Technical Documentation

Log Streaming requires additional licensing. Contact your Netskope account team to enable it in your account.

Log Streaming Overview

To guarantee reliable data delivery, the Log Streaming pipeline employs automatic retransmission when delivery acknowledgment from the target bucket is not received within the expected window. Customers should anticipate up to 0.1% duplicate events at the SIEM destination as a consequence of this reliability mechanism.

Netskope Log Streaming allows you to access all Netskope-generated logs directly within your preferred cloud storage and further SIEM tools without the need for additional infrastructure like VMs, improving scalability, cost efficiency, and real-time data availability.

This solution eliminates the need for customers to manage additional infrastructure like VMs for log ingestion, reducing complexity, cost, and operational overhead. It also addresses scalability challenges, enables real-time log ingestion, and allows logs to be delivered to preferred cloud destinations, ensuring easier access and analysis within existing security and compliance workflows.

The following is the general procedural flow to launch your stream:

Configuring Streams: Name and properties you want to stream
Choosing Data Sets: Data parameters you want to log to the destination
Configuring Destinations: Configure the destination to stream log files
Activating Streams: Enable the configured stream

Once a stream is enabled, it appears in the stream control panel.