elastic / elastic/integrations

[Rubrik RSC Metrics]: Add TCP/UDP Input for Rubrik Syslog

Open
#15,971 0 comments 0 reactions 0 assignees View on GitHub
Integration:rubrik needs:triage Team:Obs-InfraObs
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
2d 17h
Merged PRs (30d)
225

Description

### Integration Name

Rubrik RSC Metrics [rubrik]

### Dataset Name

logs-rubrik.system

### Integration Version

0.9.1

### Agent Version

9.1.5

### OS Version and Architecture

Ubuntu 24.04.3 LTS (Noble Numbat)

### User Goal

In an effort to gain visibility into Rubrik, the metrics encompass a wide range. But Rubrik also produces logs, that can be added as a secondary input for this integration. Perhaps it can then be renamed from Rubrik RSC Metrics to simply Rubrik RSC.

### Existing Features

For security reasons, ingesting Rubrik syslog is valuable.

### What did you see?

No logs portion in the integration

### Anything else?

I believe other SIEM platforms have this capability:
https://docs.logrhythm.com/devices/docs/syslog-rubrik

Perhaps it might not need much parsing, just enough to get the syslog message out and to be consolidated into one integration

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.