Product Ideas Portal

Got an idea for a new feature? Maybe a tweak to make something work even better? Wish there was an integration with another product to make you even more productive? You've come to the right place.

The Product Ideas Portal lets you submit whatever product feedback you have, good, bad, ugly, and anywhere between.

Want to stay anonymous? No problem, you can still share your ideas with us. You can also create an account which lets you vote on other people's ideas and receive updates when your idea's status changes.

To learn more about how an idea becomes a feature, check out this infographic.


68 VOTE

Send all session events to Syslog as they happen

The current SIEM integration (for Splunk and HP Arcsight) pull "completed" Bomgar session information from the appliance and stuff it into the target SIEM tool in syslog format.  A very powerful capability would be to have an option on the RS/PA appliance to automatically send ALL session events to the pre-configured secure syslog server "as they happen".  This would allow for alerts to be raised for events in a more real time manner by these 3rd party tools.  

  • Boatner Blankenstein
  • Mar 22 2017
  • Under evaluation
Submitter Name Boatner Blankenstein
Bomgar Version All
  • Attach files
  • Jie Chen commented
    June 6, 2017 14:53

    We are using Bomgar-16.2.2.  Our security requests to have all session events to Syslog (so it will look similar to the Bomgar Report).  This would allow security to monitor system remote access more efficiently.

  • Brian Verble commented
    July 25, 2017 14:12

    This would be great for Remote Support as well!

  • Admin
    Donald Hasson commented
    September 27, 2017 04:03

    To clarify, Bomgar Remote Support and Privileged Access currently integrate with SIEM tools such that syslog and session events can be sent over. This specific idea is to send the session events in real time versus waiting until the end of the session today (syslog is always near real-time).

    If the real-time aspect is what all the voters are looking for, could you share with us the key events you're looking to send to the SIEM tool from the Bomgar sessions? 

    Also, is this simply a security mandate, or is the security team looking to solve a specific problem by integrating real-time Bomgar session events with your SIEM tool?

  • Guest commented
    August 1, 2018 19:31

    I think that at least the most important events should be sent.... session start/stop, may be when someone joins..... tools initiation (screen sharing, file transfer,...)

  • Guest commented
    September 18, 2018 13:21

    it would be useful to send events when someone adds or removes jump ítems as well as the ones that where mentioned here: start / stop a new session, start / stop a tool, someone joining a session