Skip to main content
Sumo Logic

Install the Zscaler Internet Access App and view the Dashboards

  1. Last updated
  2. Save as PDF
This page provides instructions on how to install the Zscaler Internet Access App, and provides examples of each of the dashboards.

This page provides instructions on how to install the Zscaler Internet Access App, and provides examples of each of the dashboards. The App preconfigured searches and Dashboards provide easy-to-access visual insights into your data. 

Install the Sumo Logic App

To install the app, do the following:

Locate and install the app you need from the App Catalog. If you want to see a preview of the dashboards included with the app before installing, click Preview Dashboards.

  1. From the App Catalog, search for and select the app. 
  2. Select the version of the service you're using and click Add to Library.
  1. To install the app, complete the following fields.
    1. App Name. You can retain the existing name, or enter a name of your choice for the app.

    2. Data Source. Select either of these options for the data source.

      • Choose Source Category, and select a source category from the list.

      • Choose Enter a Custom Data Filter, and enter a custom source category beginning with an underscore. Example: (_sourceCategory=MyCategory).

    3. Advanced. Select the Location in Library (the default is the Personal folder in the library), or click New Folder to add a new folder.
  2. Click Add to Library.

Once an app is installed, it will appear in your Personal folder, or other folder that you specified. From here, you can share it with your organization. 

Panels will start to fill automatically. It's important to note that each panel slowly fills with data matching the time range query and received since the panel was created. Results won't immediately be available, but with a bit of time, you'll see full graphs and maps. 

Dashboards

Zscaler- Overview 

The Zscaler - Overview Dashboard provides general information of the Zscaler Web Gateway logs, including Panels that drill-down into the other Zscaler Dashboards. The Overview Dashboard gives a good starting point for detecting anomalies in blocked traffic and geographic hotspots for allowed and blocked traffic.

Zscaler- Behavior 

The Zscaler - Behavior Dashboard focuses on allowed traffic behaviors, showing trends and deviations by users, content types accessed, content categories, super categories, and bandwidth trends.

Zscaler- Blocked Traffic 

The Zscaler - Blocked Traffic Dashboard illustrates outliers in both blocked traffic peaks and multi-dimensional outliers for blocked activity specific to user.

Zscaler- File Classification Activity

The Zscaler - File Classification Activity Dashboard focuses on file-based threats by users, threat name, file types, and subtypes for a overarching view of blocked files across the Zscaler environment.

ZIA - DNS

The ZIA - DNS Dashboard focuses on DNS activity specifically around denied requests and responses, server locations across the Zscaler environment.

Use this dashboard to:

  • Gain insights into DNS health and performance.
  • Determine if rules need tweaking based on volume of denied/allowed requests and responses.

ZIA - Logs

The ZIA - Logs Dashboard gives insights into different logs being produced in the Zscaler environment.

Use this dashboard to:

  • Get quick insights into logs volume by source.
  • View logs filtered by type and users and determine any potential issues.

ZIA - Threats

The ZIA - Threats Dashboard focuses on threats in your Zscaler environment.

Use this dashboard to:

  • Detect anomalies in blocked traffic and geographic hotspots for allowed and blocked traffic.
  • Gain insights into threats by categories and transactions.
  • Identify locations and users being blocked as a sign of potential suspicious or malicious activity.