elastic / elastic/integrations
[Rubrik RSC Metrics]: Add TCP/UDP Input for Rubrik Syslog
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 225
Description
### Integration Name
Rubrik RSC Metrics [rubrik]
### Dataset Name
logs-rubrik.system
### Integration Version
0.9.1
### Agent Version
9.1.5
### OS Version and Architecture
Ubuntu 24.04.3 LTS (Noble Numbat)
### User Goal
In an effort to gain visibility into Rubrik, the metrics encompass a wide range. But Rubrik also produces logs, that can be added as a secondary input for this integration. Perhaps it can then be renamed from Rubrik RSC Metrics to simply Rubrik RSC.
### Existing Features
For security reasons, ingesting Rubrik syslog is valuable.
### What did you see?
No logs portion in the integration
### Anything else?
I believe other SIEM platforms have this capability:
https://docs.logrhythm.com/devices/docs/syslog-rubrik
Perhaps it might not need much parsing, just enough to get the syslog message out and to be consolidated into one integration
Contributor guide
Assessment
This issue has not been assessed yet.