Product Ideas Portal

Got an idea for a new feature? Maybe a tweak to make something work even better? Wish there was an integration with another product to make you even more productive? You've come to the right place.

The Product Ideas Portal lets you submit whatever product feedback you have, good, bad, ugly, and anywhere between.

Want to stay anonymous? No problem, you can still share your ideas with us. You can also create an account which lets you vote on other people's ideas and receive updates when your idea's status changes.

To learn more about how an idea becomes a feature, check out this infographic.


85 Vote

Send all session events to Syslog as they happen

The current SIEM integration (for Splunk and HP Arcsight) pull "completed" Bomgar session information from the appliance and stuff it into the target SIEM tool in syslog format.  A very powerful capability would be to have an option on the RS/PA appliance to automatically send ALL session events to the pre-configured secure syslog server "as they happen".  This would allow for alerts to be raised for events in a more real time manner by these 3rd party tools.  

  • Avatar32.5fb70cce7410889e661286fd7f1897de Guest
  • Mar 22 2017
  • Planned
  • Attach files
  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    24 Oct, 2019 10:17pm

    This request is more then 2 years old...  For when is it planned?

     

    About the events that should be sent to syslog, I would like to add the representatives login and the accessed machine.

     

    Regards,

    Lucas

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    18 Sep, 2018 01:21pm

    it would be useful to send events when someone adds or removes jump ítems as well as the ones that where mentioned here: start / stop a new session, start / stop a tool, someone joining a session

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    1 Aug, 2018 07:31pm

    I think that at least the most important events should be sent.... session start/stop, may be when someone joins..... tools initiation (screen sharing, file transfer,...)

  • Admin
    Donald Hasson commented
    27 Sep, 2017 04:03am

    To clarify, Bomgar Remote Support and Privileged Access currently integrate with SIEM tools such that syslog and session events can be sent over. This specific idea is to send the session events in real time versus waiting until the end of the session today (syslog is always near real-time).

    If the real-time aspect is what all the voters are looking for, could you share with us the key events you're looking to send to the SIEM tool from the Bomgar sessions? 

    Also, is this simply a security mandate, or is the security team looking to solve a specific problem by integrating real-time Bomgar session events with your SIEM tool?

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    25 Jul, 2017 02:12pm

    This would be great for Remote Support as well!

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    6 Jun, 2017 02:53pm

    We are using Bomgar-16.2.2.  Our security requests to have all session events to Syslog (so it will look similar to the Bomgar Report).  This would allow security to monitor system remote access more efficiently.