Prerequisites for the Bomgar Privileged Access Integration with Splunk

Applicable Versions

  • Bomgar Privileged Access: 15.x and newer
  • Splunk on-premise: 6.3.0 and newer

Network Considerations

The following network communication channels must be open for the integration to work properly:

Outbound From Inbound To TCP Port # Purpose
Bomgar Middleware Engine Server Splunk Server 1514 Session event data is pushed as specially formatted syslog messages into Splunk
Bomgar Appliance Splunk Server 514 Syslog event information from the appliance

Prerequisite Installation and Configuration

The Splunk integration is a Bomgar Middleware Engine plugin. To install the Bomgar Middleware Engine, follow the instructions in the Bomgar Middleware Engine Configuration document.