Forum Discussion

Hemant_yadav

Copper Contributor

Feb 10, 2022

Solved

How we can upload MWG logs to MDCA for cloud discovery via Cloud API

Can we send McAfee We gateway logs to MDCA for cloud discovery using cloud API instead of log collector

JaredPoeppelman
Feb 15, 2022
Yes, you can do this using the cloud discovery API for uploading logs: https://docs.microsoft.com/en-us/defender-cloud-apps/api-discovery The source format you will need is likely MCAFEE_SWG or MCAFEE_SWG_SYSLOG.

The Send-MCASDiscoveryLog command of the PS module utilizes the API, if you want to see a PS example in addition to the curl examples in the documentation above: https://github.com/Microsoft/MCAS/blob/master/Functions/Send-MCASDiscoveryLog.ps1

JaredPoeppelman

Former Employee

Feb 15, 2022

Yes, you can do this using the cloud discovery API for uploading logs: https://docs.microsoft.com/en-us/defender-cloud-apps/api-discovery The source format you will need is likely MCAFEE_SWG or MCAFEE_SWG_SYSLOG.

The Send-MCASDiscoveryLog command of the PS module utilizes the API, if you want to see a PS example in addition to the curl examples in the documentation above: https://github.com/Microsoft/MCAS/blob/master/Functions/Send-MCASDiscoveryLog.ps1

Hemant_yadav

Copper Contributor

Feb 25, 2022

Jared Thank you for your valuable response, in documents it is showing like first we need to fetch or download logs file from MWG firewall in our local machine ( in our desktop) and then we need to upload these files into MCAS by using file name and file path. Right ? Is there any way that we can integrate logs file form MWG firewall directly to MCAS by using REST Cloud API.