elastic / elastic/integrations
[New Integration] Wallix Bastion
Open
Category: Identity & Access Management
enhancement
integration
New Integration
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 225
Description
Feature request to develop an integration for [Wallix Bastion](https://www.wallix.com/privileged-access-management)
## Workaround solution
Write own Logstash pipeline to parse the data and where possible reuse existing integrations. The data is sent via syslog with RFC3164 and based on process.name we can select which dataset to use (e.g., data coming from the "sudo" process can be parsed with system.auth). For the logs without an Integration counterpart the customer is writing their own pipeline (mainly based on kv filter).
Contributor guide
Assessment
This issue has not been assessed yet.