Workspot SIEM Integration

Workspot Watch™ is a sophisticated, big data trending and correlation engine that makes global virtual desktop and app observability easy. Data gathered via Watch drives the Workspot Network Operations Center (NOC). Workspot Watch collects millions of messages from endpoint devices, virtual machine agents, protocol gateways, enterprise connectors, and other Workspot control plane services.  The data is gathered from multiple clouds, spanning thousands of locations around the globe, and hundreds of networks in dozens of regional data centers.

Workspot Watch helps enforce your Zero Trust Security policy, but unlike other virtual desktop solutions, we go way beyond just supporting zero trust endpoints. The trending capabilities of Watch reveal activity patterns across each customer’s global desktop estate that can indicate a brewing security issue, providing an opportunity for proactive mitigation measures to be taken. While the Workspot Enterprise VDI platform is fully instrumented to feed activity data to Workspot Watch, it’s critical to note that unlike other VDI solutions, our virtual desktop control plane is completely separate from the customer’s data plane, so Workspot never sees, nor does it have access to customer data.

Workspot support teams monitor VDI platform behavior globally, across cloud regions. Individual customers also make use of this valuable system health data by feeding it into their Security Information and Event Management (SIEM) systems to enable security alerts, ongoing monitoring, and day-to-day operations optimization to ensure internal governance compliance.