Beyondtrust Remote support integration to splunk cloud

tv00638481 — Fri, 01 Mar 2024 14:55:54 GMT

Hi,

We tried to integrate beyontrust privileged remote support app integration to splunk for gettting the logs from BT PRA as per the documentation beyondtrust.

https://www.beyondtrust.com/docs/remote-support/how-to/integrations/splunk/configure-splunk.htm

Documentation has some 4-5 steps to configure in data inputs

1.Input name .

2.Client ID & token received from the beyond trust post once they enable the api.

3.PRA site id.

5.index name

6.source type

we have provided these details but we are unable to see the logs coming to Splunk. However, when check in index=_internal able to beyondtrust config logs in Splunk but not the actual event logs from beyond trust pra.

Could you please kindly let me know if anyone has integrated BT PRA and if any troubleshooting steps/guidance to confirm that there is issue from Splunk side so that. will ask the BT team to further check from there end.

This app is not Splunk developed.no support from Splunk.

Thank you & much appreciated for your responses.

Re: Beyondtrust Remote support integration to splunk cloud

krish_splunk_99 — Fri, 02 Aug 2024 19:05:22 GMT

@tv00638481 - Have you got any fix for this issue. I too facing the same. PRA logs not getting updated into splunk.

Re: Beyondtrust Remote support integration to splunk cloud

tv00638481 — Fri, 17 Jan 2025 12:26:58 GMT

Yes, i'm also facing similar issue. not resolved.

topic Beyondtrust Remote support integration to splunk cloud in Splunk Cloud Platform

Beyondtrust Remote support integration to splunk cloud

Re: Beyondtrust Remote support integration to splunk cloud

Re: Beyondtrust Remote support integration to splunk cloud