---
title: "Skyhigh"
slug: "skyhigh"
tags: ["Self Service Ingestion"]
updated: 2025-02-17T14:34:44Z
published: 2025-02-17T14:34:44Z
canonical: "docs.hunters.ai/skyhigh"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Skyhigh

Self Service Ingestion

          

Connect this data source on your own, using the Hunters platform.

****TL;DR****

| Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
| --- | --- | --- | --- | --- | --- | --- | --- |
| Skyhigh |  |  | ✅ | ✅ | skyhigh_webgateway_alerts | Key Value | S3 |

---

## Overview

![image.png](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/image%28154%29.png)[Skyhigh Secure Web Gateway](https://success.skyhighsecurity.com/Skyhigh_Secure_Web_Gateway_(On_Prem)/Secure_Web_Gateway_Overview/About_Secure_Web_Gateway_(On_Prem)) is a web security product that protects your network against web threats. These threats arise when users who work on-prem within your network access the web, for example, when they browse the web or download a file from there.

Integrating Skyhigh SWG into Hunters will allow ingestion of the data types into your datalake, and leveraging the data for various detection use cases.

## Supported data types

### Skyhigh SWG Logs

**Table name:** `skyhigh_webgateway_alerts`

Skyhigh Secure Web Gateway (SWG) Logs offer a comprehensive view into an organization's web traffic and security posture, providing detailed records of user activities, threat detections, and policy enforcement actions. These logs are instrumental for tracking and analyzing web access, identifying and responding to web-based threats, and ensuring compliance with data protection policies.

Learn more [here](https://success.skyhighsecurity.com/Skyhigh_Secure_Web_Gateway_(On_Prem)/Monitoring/Logging/About_Logging).

## Send data to Hunters

Hunters supports the ingestion of Skyhigh logs via an intermediary AWS S3 bucket.

**To connect Skyhigh logs:**

1. Follow [this guide](https://success.skyhighsecurity.com/Skyhigh_Secure_Web_Gateway_%28On_Prem%29/Monitoring/Logging/About_Logging) to collect the logs from your on prem appliances.
2. Ship the logs to an AWS S3 bucket.
3. Once the export is completed and the logs are collected to S3, follow the steps in [this section](/v1/docs/connect-data-through-aws-s3).

## Expected format

Logs are expected in Key Value format.

```plaintext
time_stamp="[17/Jan/2024:01:00:03 +0100]" auth_user="Ab_user" src_ip="123.10.210.12" server_ip="101.200.01.102" host="abc.example.com" url_port="80" status_code="304" bytes_from_client="123" bytes_to_client="233" categories="Software/Hardware" rep_level="Minimal Risk" method="GET" url="http://abc.example.com/download/update/v3/static/test/en/sample.cab?122456789" media_type="" application_name="" user_agent="Microsoft-testAPI/10.0" block_res="0" block_reason="" virus_name="" hash="" filename="sample.cab" filesize="0"
```