Forcepoint DLP
Use Forcepoint DLP data for Cortex AgentiX.
You can configure collecting Corelight Zeek logs using a content pack integration (onboarded prior to July 26, 2026) or connector (onboarded after July 26, 2026):
Link to content pack/integration details (onboarded prior to July 26, 2026)
The Forcepoint DLP content pack fetches security incidents from Forcepoint DLP and ingests them as events into Cortex AgentiX for processing and analysis. contains the Forcepoint DLP Modeling Rule, and the Forcepoint DLP Parsing Rule. It also includes the following integration:
Forcepoint DLP Event Collector (Beta): Use this integration to fetch security incidents from Forcepoint DLP as Cortex AgentiX events. This integration is an event collector and utilizes parsing and modeling rules within the content pack for data normalization.
Link to connector (onboarded after July 26, 2026)
Last updated
Was this helpful?