DDS: Beyondtrust Privileged Remote Access v1.0.0 #22381

surabhipatel-crest · 2026-01-21T08:17:32Z

What does this PR do?

This is a initial release PR of BeyondTrust Privileged Remote Access integration including all the required assets.

Integration Logo Sources: https://assets.beyondtrust.com/assets/images/products/icons/pra-icon.svg

Review checklist (to be filled by reviewers)

[ ] Feature or bugfix MUST have appropriate tests (unit, integration, e2e)
[ ] Add the qa/skip-qa label if the PR doesn't need to be tested during QA.
[ ] If you need to backport this PR to another branch, you can add the backport/ label to the PR and it will automatically open a backport PR once this one is merged

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3e70457c35

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

beyondtrust_privileged_remote_access/assets/logs/beyondtrust-privileged-remote-access.yaml

estherk15 · 2026-01-21T17:27:32Z

...ed_remote_access/assets/dashboards/beyondTrust_pra_authentication_and_access_management.json

+            "id": 2063743201609514,
+            "definition": {
+                "type": "note",
+                "content": "This dashboard provide comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. Designed to help security teams identify risky access patterns, account misuse, and compromised credentials.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",


Suggested change

"content": "This dashboard provide comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. Designed to help security teams identify risky access patterns, account misuse, and compromised credentials.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",

"content": "This dashboard provides comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. It's designed to help security teams identify risky access patterns, account misuse, and compromised credentials.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",

estherk15 · 2026-01-21T17:27:49Z

...ed_remote_access/assets/dashboards/beyondTrust_pra_authentication_and_access_management.json

@@ -0,0 +1,3922 @@
+{
+    "title": "BeyondTrust PRA Authentication and Access Management",
+    "description": "This dashboard provide comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. Designed to help security teams identify risky access patterns, account misuse, and compromised credentials.",


Suggested change

"description": "This dashboard provide comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. Designed to help security teams identify risky access patterns, account misuse, and compromised credentials.",

"description": "This dashboard provides comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. It's designed to help security teams identify risky access patterns, account misuse, and compromised credentials.",

estherk15 · 2026-01-21T17:38:16Z

...t_privileged_remote_access/assets/dashboards/beyondTrust_pra_identity_and_user_activity.json

@@ -0,0 +1,3841 @@
+{
+    "title": "BeyondTrust PRA Identity and User Activity",
+    "description": "This dashboard provide comprehensive insights into how users access and interact with privileged systems. It highlights account changes, access configuration updates, and reporting actions to help security teams spot unusual behavior.",


Suggested change

"description": "This dashboard provide comprehensive insights into how users access and interact with privileged systems. It highlights account changes, access configuration updates, and reporting actions to help security teams spot unusual behavior.",

"description": "This dashboard provides comprehensive insights into how users access and interact with privileged systems. It highlights account changes, access configuration updates, and reporting actions to help security teams spot unusual behavior.",

estherk15 · 2026-01-21T17:38:40Z

...t_privileged_remote_access/assets/dashboards/beyondTrust_pra_identity_and_user_activity.json

+            "id": 120141214903234,
+            "definition": {
+                "type": "note",
+                "content": "This dashboard provide comprehensive insights into how users access and interact with privileged systems. It highlights account changes, access configuration updates, and reporting actions to help security teams spot unusual behavior.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",


Suggested change

"content": "This dashboard provide comprehensive insights into how users access and interact with privileged systems. It highlights account changes, access configuration updates, and reporting actions to help security teams spot unusual behavior.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",

"content": "This dashboard provides comprehensive insights into how users access and interact with privileged systems. It highlights account changes, access configuration updates, and reporting actions to help security teams spot unusual behavior.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",

estherk15 · 2026-01-21T17:51:54Z

...rivileged_remote_access/assets/dashboards/beyondTrust_pra_network_and_platform_security.json

+            "id": 797702432985848,
+            "definition": {
+                "type": "note",
+                "content": "This dashboard provide comprehensive insights into  configuration changes across network objects, routing, syslog destinations, SNMP settings, API accounts, and external security providers to support change management, audit trails, and drift detection.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",


Suggested change

"content": "This dashboard provide comprehensive insights into configuration changes across network objects, routing, syslog destinations, SNMP settings, API accounts, and external security providers to support change management, audit trails, and drift detection.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",

"content": "This dashboard provides comprehensive insights into configuration changes across network objects, routing, syslog destinations, SNMP settings, API accounts, and external security providers to support change management, audit trails, and drift detection.\n\nFor more information, see the [BeyondTrust Privileged Remote Access Integration Documentation](https://docs.datadoghq.com/integrations/beyondtrust_privileged_remote_access/).\n\n**Tips**\n- Use the timeframe selector in the upper-right corner of the dashboard to change the default timeframe.\n- Clone this dashboard to rearrange, modify, and add widgets and visualizations.",

estherk15 · 2026-01-21T17:52:25Z

...rivileged_remote_access/assets/dashboards/beyondTrust_pra_network_and_platform_security.json

+                    {
+                        "id": 6112640160888389,
+                        "definition": {
+                            "title": "Events details",


Suggested change

"title": "Events details",

"title": "Event details",

estherk15 · 2026-01-21T17:52:50Z

...rivileged_remote_access/assets/dashboards/beyondTrust_pra_network_and_platform_security.json

+                    {
+                        "id": 2805558255072441,
+                        "definition": {
+                            "title": "Top Hosts by network address action",


Suggested change

"title": "Top Hosts by network address action",

"title": "Top hosts by network address action",

estherk15 · 2026-01-21T17:54:49Z

beyondtrust_privileged_remote_access/assets/dashboards/beyondTrust_pra_overview.json

+                        "id": 5234904368995564,
+                        "definition": {
+                            "type": "note",
+                            "content": "Datadog Cloud SIEM analyzes and correlates the **BeyondTrust Privileged Remote Access** logs to detect threats to your environment in real time. If you don't see signals please make sure you've enabled [Datadog Cloud SIEM](/security/overview).",


Suggested change

"content": "Datadog Cloud SIEM analyzes and correlates the **BeyondTrust Privileged Remote Access** logs to detect threats to your environment in real time. If you don't see signals please make sure you've enabled [Datadog Cloud SIEM](/security/overview).",

"content": "Datadog Cloud SIEM analyzes and correlates the **BeyondTrust Privileged Remote Access** logs to detect threats to your environment in real time. If you don't see any signals, make sure you've enabled [Datadog Cloud SIEM](/security/overview).",

Review from estherk15 is dismissed. Related teams and files:

documentation
- beyondtrust_privileged_remote_access/assets/dashboards/beyondtrust_pra_authentication_and_access_management.json
- beyondtrust_privileged_remote_access/assets/dashboards/beyondtrust_pra_identity_and_user_activity.json
- beyondtrust_privileged_remote_access/assets/dashboards/beyondtrust_pra_network_and_platform_security.json
- beyondtrust_privileged_remote_access/assets/dashboards/beyondtrust_pra_overview.json
- beyondtrust_privileged_remote_access/manifest.json

github-actions · 2026-01-22T10:52:58Z

⚠️ The qa/skip-qa label has been added with shippable changes

The following files, which will be shipped with the agent, were modified in this PR and
the qa/skip-qa label has been added.

You can ignore this if you are sure the changes in this PR do not require QA. Otherwise, consider removing the label.

List of modified files that will be shipped with the agent

beyondtrust_privileged_remote_access/datadog_checks/beyondtrust_privileged_remote_access/__about__.py
beyondtrust_privileged_remote_access/datadog_checks/beyondtrust_privileged_remote_access/__init__.py
beyondtrust_privileged_remote_access/datadog_checks/beyondtrust_privileged_remote_access/data/conf.yaml.example
beyondtrust_privileged_remote_access/changelog.d/22381.added
beyondtrust_privileged_remote_access/pyproject.toml

Review from estherk15 is dismissed. Related teams and files:

documentation
- beyondtrust_privileged_remote_access/README.md

Add Beyondtrust Privileged Remote Access integration

6c6314f

temporal-github-worker-1 bot added agent/review-requested docs/review-requested ecosystems/review-requested product/review-requested labels Jan 21, 2026

datadog-agent-integrations-bot bot added documentation dev/testing dev/tooling release qa/skip-qa Automatically skip this PR for the next QA labels Jan 21, 2026

surabhipatel-crest added 5 commits January 21, 2026 14:27

Updated changelog and yaml files

48a6fd8

Validated check failures

af8e3d1

Validated check failures

bba2b5a

Validated check failures

8d1c513

Validated check failures

3e70457

surabhipatel-crest marked this pull request as ready for review January 21, 2026 12:46

surabhipatel-crest requested review from a team as code owners January 21, 2026 12:46

datadog-agent-integrations-bot bot added team/agent-integrations team/documentation team/logs-integrations-reviewers team/saas-integrations labels Jan 21, 2026

chatgpt-codex-connector bot reviewed Jan 21, 2026

View reviewed changes

beyondtrust_privileged_remote_access/assets/logs/beyondtrust-privileged-remote-access.yaml Show resolved Hide resolved

estherk15 previously approved these changes Jan 21, 2026

View reviewed changes

temporal-github-worker-1 bot added docs/approved and removed docs/review-requested labels Jan 21, 2026

Updated dashboard and sample

b5e0774

temporal-github-worker-1 bot added docs/review-requested and removed docs/approved labels Jan 22, 2026

surabhipatel-crest added 3 commits January 22, 2026 16:33

Updated test yaml

d8f3885

Updated test yaml

af6b542

Merge branch 'master' into beyondtrust-privileged-remote-access-v1.0.0

f0be4be

surabhipatel-crest requested a review from estherk15 January 22, 2026 11:49

estherk15 previously approved these changes Jan 22, 2026

View reviewed changes

temporal-github-worker-1 bot added docs/approved and removed docs/review-requested labels Jan 22, 2026

Updated agent version

c9ecbf1

temporal-github-worker-1 bot added docs/review-requested and removed docs/approved labels Jan 23, 2026

surabhipatel-crest added 3 commits January 23, 2026 17:02

chore: trigger CI

9da3a7e

chore: trigger CI

a24421a

Added owner in manifest

8bc1440

datadog-agent-integrations-bot bot added the changelog/no-changelog label Jan 29, 2026

chore: trigger CI

f8146ed

	"description": "This dashboard provide comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. Designed to help security teams identify risky access patterns, account misuse, and compromised credentials.",
	"description": "This dashboard provides comprehensive insights into authentication successes/failures, user identity modifications, admin resets, and credential enrollment/removal events. It's designed to help security teams identify risky access patterns, account misuse, and compromised credentials.",

	"title": "Top Hosts by network address action",
	"title": "Top hosts by network address action",

	"content": "Datadog Cloud SIEM analyzes and correlates the BeyondTrust Privileged Remote Access logs to detect threats to your environment in real time. If you don't see signals please make sure you've enabled [Datadog Cloud SIEM](/security/overview).",
	"content": "Datadog Cloud SIEM analyzes and correlates the BeyondTrust Privileged Remote Access logs to detect threats to your environment in real time. If you don't see any signals, make sure you've enabled [Datadog Cloud SIEM](/security/overview).",

DDS: Beyondtrust Privileged Remote Access v1.0.0 #22381

Are you sure you want to change the base?

DDS: Beyondtrust Privileged Remote Access v1.0.0 #22381

Conversation

surabhipatel-crest commented Jan 21, 2026

What does this PR do?

Review checklist (to be filled by reviewers)

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions bot commented Jan 22, 2026 •

edited

Loading