Workspot SIEM Integration

Workspot Watch™ is a sophisticated, big data trending and correlation engine that makes global cloud PC observability easy. Data gathered via Watch drives the Workspot Network Operations Center (NOC). Workspot Watch collects millions of messages from endpoint devices, virtual machine agents, protocol gateways, enterprise connectors, and other Workspot control plane services.  The data is gathered from multiple clouds, spanning thousands of locations around the globe, and hundreds of networks in dozens of regional data centers.

Workspot Watch helps enforce your Zero Trust Security policy, but unlike other cloud PC solutions, we go way beyond just supporting zero trust endpoints. The trending capabilities of Watch reveal activity patterns across the cloud PC platform that can indicate a brewing security issue, providing an opportunity for proactive mitigation measures to be taken. While the Workspot Enterprise Desktop Cloud platform is fully instrumented to feed activity data to Workspot Watch, it’s critical to note that unlike other cloud PC solutions, our cloud desktop control plane is completely separate from the customer’s data plane, so Workspot never sees, nor does it have access to customer data.

Workspot support teams monitor cloud PC platform behavior globally, across cloud regions. Individual customers also make use of this valuable cloud PC health data by feeding it into their Security Information and Event Management (SIEM) systems to enable security alerts, ongoing monitoring, and day-to-day operations optimization to ensure internal governance compliance.