elastic / elastic/integrations

[New Integration] Wallix Bastion

Open
#9,647 3 comments 1 reaction 0 assignees View on GitHub
Category: Identity & Access Management enhancement integration New Integration
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
2d 17h
Merged PRs (30d)
225

Description

Feature request to develop an integration for [Wallix Bastion](https://www.wallix.com/privileged-access-management)

## Workaround solution

Write own Logstash pipeline to parse the data and where possible reuse existing integrations. The data is sent via syslog with RFC3164 and based on process.name we can select which dataset to use (e.g., data coming from the "sudo" process can be parsed with system.auth). For the logs without an Integration counterpart the customer is writing their own pipeline (mainly based on kv filter).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.