Configure Bomgar Privileged Access for Integration with Splunk
In addition to the steps outlined in the Bomgar SIEM Tool Plugin Installation and Administration, the Splunk integration also supports consumption of syslog output directly from the Bomgar Appliance.
All of the steps in this section take place in the Bomgar /appliance administrative interface.
- Access your Bomgar interface by going to the hostname of your Bomgar Appliance followed by /appliance (e.g., https://access.example.com/appliance).
- Go to /appliance >Security > Appliance Administration and locate the Syslog section.
- Enter the hostname or IP address for your remote syslog server.
- Select a message format.
- Click Submit.