Skip to main content
AppGate ZTNA Dashboard app icon

AppGate ZTNA Dashboard

Provides search-time field extraction and normalization for AppGate ZTNA events from LogForwarder defining base macros for dashboard queries.Built by Connor Witt
splunk product badge

Default Version 1.0.0

September 3, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4

Rating
0
(0)

Log in to rate this app

Support
Developer Supported

The AppGate ZTNA Demo Add-on provides search-time field normalization and extraction for AppGate ZTNA (Zero Trust Network Access) events. It processes JSON-formatted log data the AppGate LogForwarder component. The add-on defines a set of base search macros that map raw JSON field paths into normalized field names, enabling consistent querying across AppGate data feeds. These macros serve as the foundation for AppGate ZTNA demo dashboards by standardizing field references for policy names, entitlement names, event types, and snapshot metadata. This add-on is intended for organizations deploying AppGate ZTNA solutions who need to ingest and normalize telemetry from both operational logs and configuration snapshots.