---
title: "Iboss"
slug: "iboss"
updated: 2025-11-13T05:59:02Z
published: 2025-11-13T05:59:02Z
canonical: "docs.databee.buzz/iboss"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Iboss

Iboss is a cloud-based cybersecurity platform that provides **secure web gateway (SWG), cloud firewall, and zero trust network access (ZTNA)** capabilities. It helps organizations protect users and devices by routing internet-bound traffic through the Iboss cloud.

**Integration Method:** Data Collector (syslog)

**Tables**: HTTP Activity (4002)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Web logs | Captures user activity, provides visibility for monitoring, auditing and network traffic analysis. |

This integration supports the following versions.

| Data Collector API version | 0.6-82-f7fa18e |
| --- | --- |

## Prerequisites

- The user should have a [compatible version](https://docs.databee.buzz/docs/data-collector#system-requirements) of the system in which the Data Collector is installed. For installation steps, please follow the steps mentioned [here](https://docs.databee.buzz/docs/data-collector#configure-data-collector-in-databee).
- The user should have access to DataBee console.

## Configuration Overview

**Iboss Cloud -** Logs are sent from the Iboss cloud to DataBee

**Data Collector -** This host has the DataBee Data Collector installed. It receives logs from iboss and forwards the events to DataBee via HTTPS.

1. [Configure syslog in Data Collector](/user-manual/docs/iboss#configure-syslog-on-data-collector) machine
2. Configure s[yslog output on iboss cloud](/user-manual/docs/iboss#configure-syslog-on-iboss-cloud)
3. [Configure Iboss feed](/user-manual/docs/iboss#databee-configuration) in DataBee console

## Configure syslog on Data Collector

In this configuration, logs will be received from iboss on port 443. Rsyslog is configured to forward all of it to port 51441. Those logs will be sent to DataBee via HTTPS.

1. Login to the Linux host machine.
2. Edit rsyslog.conf as a super user. Run the command **sudo nano /etc/rsyslog.conf** with admin privileges.
3. Enable following highlighted TCP lines with port that you want to expose to client machines to forward logs. *For e.g, port 443 is opened here for clients to forward logs.*
4. Add **auth,authpriv.* @0.0.0.0:51441** at the end of the file to expose auth logs to 51441 port. This port will be used for Iboss feed configuration in DataBee UI.
5. Save and close the file. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-qbozhcnt.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
6. Run the following command to restart syslog service **sudo service rsyslog restart**.

## Configure syslog on Iboss cloud

1. Syslog log forwarding is configured within the iboss zero trust SASE admin console from the Integrations Marketplace.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-0lk19poa.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
2. Add the Syslog log forwarding service and configure it. Refer to Iboss in product documentation for configuration details.
3. The configuration is done based on the syslog configuration parameters.
4. Choose the **Service Type**, **Log Type**, and **Protocol Type** based on configuration preference. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-ibml8sft.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
5. Add the **Host Name** of the DataBee data collector which will be receiving the forwarded logs. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-w905od4n.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
6. Add the **Port** number which is exposed from client system to listen to the logs getting forwarded as highlighted below. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image-1762942519293.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
7. Choose the type of **Log Format** that needs to be forwarded based on configuration.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-qrejgs3h.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
8. Click on the **Field Delimiter** drop-down menu and choose the desired character for log delimiting.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-6llfjxyw.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
9. Select which log **URL** **Fields** can be forwarded, based on the fields required.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-tmeeg6jh.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
10. After configuring all the parameters for the integration with syslog, kindly ensure to use **Test Current Service Transmit Settings**, to test the connection between the server and the platform based on the settings. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-wyep04cr.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
11. Click **Add Service** to confirm the addition of the new service instance to the platform.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-i8878sgm.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-cz0pkr36.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
2. Search for the **Iboss** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-ye946z1u.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
3. Click on the **Data Collector** for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-jw2qp9q8.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
4. Click on the **Syslog**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-q2xtk200.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
5. Enter feed contact information and select data collector created from the previous step.
6. click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-chhnz5il.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
7. In the configuration page, confirm the following:

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-8u6iofa7.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
  - Select the mode as **TCP** from the dropdown.
  - Fill the port field with port configured during syslog configuration in host machine.
  - Click **Next**.
8. If you don’t want to filter logs based on syslog messages from host/clients, then click on **Submit**.
  - If you want to filter the message, then click on **Add**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-le25mh5b.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)
  - You will see filters dropdown with two options i.e., Inclusion and Exclusion
    1. **Inclusion**: Provide keywords that you want to apply on syslog messages to filter which need to be processed in DataBee.
    2. **Exclusion**: Provide keywords that you want to apply on syslog messages to filter which need not to be processed in DataBee.
  - Click on **Submit**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/iboss-documentation-image-tncgab38.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A46%3A57Z&se=2026-10-30T13%3A46%3A57Z&sr=c&sp=r&sig=TI14Tw%2Fp%2B38TaIFLhF1Xcfc6ACc3BB9gZsmzvs90oAU%3D)

## Troubleshooting Tips

- If you encounter any issues regarding log forwarding, refer to the [DataBee troubleshooting document](https://docs.databee.buzz/docs/troubleshooting) for detailed guidance.

#