Does this information look incorrect or out-of-date? Please contact us at support@socos.io.
Websense Content Gateway (Content Gateway) is a Linux-based, high-performance Web proxy and cache that provides real-time content scanning and Web site classification to protect network computers from malicious Web content while controlling employee access to dynamic, user-generated Web 2.0 content.
Use the Settings > General > SIEM Integration page to configure Websense software to send log data from Filtering Service.
Before using this page to enable integration, make sure an instance of Websense Multiplexer is installed for each Policy Server in your deployment.
Perform these steps for each Policy Server instance in your deployment.
When you save your changes, Websense Multiplexer connects to Filtering Service and takes over the job of distributing log data to both Log Server and the integration.
Although the same data is passed from Filtering Service to both Log Server and SOC.OS, Log Server may be configured to perform data reduction processing tasks (like recording visits instead of hits, or consolidating log records).
For more detailed information about the data passed to the integration, see Integrating Web Security with third-party products. Subsections of the linked document provide mapping information for category numbers, disposition codes, reason strings, and other information included in the output.
https://www.websense.com/content/support/library/web/v78/triton_web_help/settings_siem_explain.aspx