Resolves an issue where users reported Blue Coat Web Security Service DSM can parse ‘Success’ events as unknown. Administrators can enable a Logpush job in their Cloudflare environment to forward HTTP request or firewall events directly to QRadar. This change adds a second protocol configuration option for administrators who do not use Amazon AWS S3 buckets for their Cloudflare logs.
An installation dependency exists with the DSM Common RPM and the updates in the EMC VMWare DSM. This RPM release updates parsing for Linux operating system service events that can be generated by VMWare hosts to ensure they parse as expected.