IMPORTANT: Please use new App here: https://splunkbase.splunk.com/app/6968
IMPORTANT: Please use new App here: https://splunkbase.splunk.com/app/6968
Minor issue/change: added version="1.1" in dashboard form root node
This Application includes Dashboards that are pre-configured for Remote Support
Requirements:
1- Remote Support integration for Splunk with Middleware Engine
2- Corresponding Data Input(See documentation https://www.beyondtrust.com/docs/remote-support/how-to/index.htm )
3- Events in Splunk from Remote Support
You can set either set source=password_safe or sourcetype=beyondtrust at the Password Safe Connector level, or at the Data Input level.
Each report in the Dashboard filter data like this: (sourcetype=beyondtrust_rs_syslog_cim) index=idx_beyondtrust
It is possible to quickly edit each report to replace with desired source, sourcetype, or index.
For any question or feedback, please contact Integrations@beyondtrust.com
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.