BeyondTrust SIEM Tool Plugin Installation and Administration
The Security Information and Event Management (SIEM) tool plugin for BeyondTrust Privileged Remote Access (PRA) enables the processing and transmission of session event data to your SIEM tool. With additional components and steps required for each, the plugin has built-in support for both HP ArcSight and Splunk as well as the ability to customize the output message format for special needs and/or use cases.
Prerequisite for Installation and Configuration of BeyondTrust SIEM Tool Plugin
To complete this integration, make sure that you have the necessary software installed and configured as indicated in this guide, accounting for any network considerations. Make sure you review and complete all steps in BeyondTrust Middleware Engine Installation and Configuration.
In addition to the network considerations listed in BeyondTrust Middleware Engine Installation and Configuration, check the individual SIEM installation guides, HP ArcSight or Splunk, for connectivity components which are specific to each tool and system.