Hello Community,

As you may know, Netskope deprecated their REST API v1 endpoint on January 31st, 2025. The new v2 API has superseded v1. Netskope has started disabling the REST API v1 in some regions. If your organization is still using the REST API v1 feed in SecOps, Netskope ingestion may be affected. Please migrate to the NETSKOPE_ALERT_V2 feed as soon as possible. SecOps has the following documentation on how to create a NETSKOPE_ALERT_V2 feed:

https://cloud.google.com/chronicle/docs/ingestion/default-parsers/netskope-alert-v2

SecOps team