Prerequisites for the Bomgar Privileged Access Integration with Splunk
You must purchase this integration separately from both your Bomgar software and your Splunk solution. For more information, contact Bomgar sales.
- Bomgar Privileged Access: 15.x and newer
- Splunk on-premise: 6.3.0 and newer
The following network communication channels must be open for the integration to work properly:
|Outbound From||Inbound To||TCP Port #||Purpose|
|Bomgar Middleware Engine Server||Splunk Server||1514||Session event data is pushed as specially formatted syslog messages into Splunk|
|Bomgar Appliance||Splunk Server||514||Syslog event information from the appliance|
Prerequisite Installation and Configuration
The Splunk integration is a Bomgar Middleware Engine plugin. To install the Bomgar Middleware Engine, follow the instructions in the Bomgar Middleware Engine Configuration document.