Remote Access Data Collection
This is a collection of scripts that can be used to collect data from remote systems.
When using Remote Access, certain data is collected, varying based on whether the host is managed or unmanaged, and the type of access used.
Unmanaged Hosts - SSH Access
- Date/Time
- Destination: IP or name the Cloud.Red on-premises virtual machine used to reach the host
- Cloud.Red User Name: Email address
- Cloud.Red Session Name: The session name used for the remote access request
- Input Over the SSH Session
- Output Over the SSH Session
- Login Name: Used to log into the hosts
Managed Hosts - SSH Access (With or Without SSO)
- All data points from Unmanaged Hosts - SSH Access
- Device Name: As defined in Cloud.Red portal
Unmanaged Hosts - HTTP(s) Proxy Access
- Date/Time
- Destination: IP or name the Cloud.Red on-premises virtual machine used to reach the host
- Cloud.Red User Name: Email address
- Cloud.Red Session Name: The session name used for the remote access request
- Connection Type: Whether the connection was HTTP or HTTPS
- HTTP Method
- HTTP URL
- Content Length (Request and Response)
- Content Type (Request and Response)
- Status Code (Response)
Managed Hosts - HTTP(s) Proxy Access (Without SSO)
- All data points from Unmanaged Hosts - HTTP(s) Proxy Access
- Device Name: As defined in Cloud.Red portal
- HTTP Headers (Request and Response) ***
- Body (Request and Response, when under 5MB) *, **
Note:
- Bodies are only collected for certain response types (text/xml, text/html, application/*).
- Bodies are explicitly not collected for specific URIs (e.g.,
mgmt/shared/auth/login
,/tmui/logmein.html
). - Certain headers (e.g., Authorization) are explicitly not collected.
Managed Hosts - HTTP(s) Proxy Access (With SSO)
- All data points from Managed Hosts - HTTP(s) Proxy Access (Without SSO)
- Login Name: Used to log into the hosts