Got an idea for a new feature? Maybe a tweak to make something work even better? Wish there was an integration with another product to make you even more productive? You've come to the right place.
The Product Ideas Portal lets you submit whatever product feedback you have, good, bad, ugly, and anywhere between.
Want to stay anonymous? Don't worry, no email address or name fields are shared on the public portal. You can create an account which lets you vote on other people's ideas and receive updates when your idea's status changes.
To learn more about how an idea becomes a feature, check out this infographic.
The current SIEM integration (for Splunk and HP Arcsight) pull "completed" Bomgar session information from the appliance and stuff it into the target SIEM tool in syslog format. A very powerful capability would be to have an option on the RS/PA appliance to automatically send ALL session events to the pre-configured secure syslog server "as they happen". This would allow for alerts to be raised for events in a more real time manner by these 3rd party tools.
This request is more then 2 years old... For when is it planned?
About the events that should be sent to syslog, I would like to add the representatives login and the accessed machine.
Regards,
Lucas
Attachments Open full size
it would be useful to send events when someone adds or removes jump ítems as well as the ones that where mentioned here: start / stop a new session, start / stop a tool, someone joining a session
Attachments Open full size
I think that at least the most important events should be sent.... session start/stop, may be when someone joins..... tools initiation (screen sharing, file transfer,...)
Attachments Open full size
To clarify, Bomgar Remote Support and Privileged Access currently integrate with SIEM tools such that syslog and session events can be sent over. This specific idea is to send the session events in real time versus waiting until the end of the session today (syslog is always near real-time).
If the real-time aspect is what all the voters are looking for, could you share with us the key events you're looking to send to the SIEM tool from the Bomgar sessions?
Also, is this simply a security mandate, or is the security team looking to solve a specific problem by integrating real-time Bomgar session events with your SIEM tool?
Attachments Open full size
This would be great for Remote Support as well!
Attachments Open full size
We are using Bomgar-16.2.2. Our security requests to have all session events to Syslog (so it will look similar to the Bomgar Report). This would allow security to monitor system remote access more efficiently.
Attachments Open full size