Jamf Pro logs integration with Splunk - Not getting logs

bsanjeeva — Fri, 28 Jan 2022 22:51:35 GMT

Hi Splunkers,

I am integrating Jamf pro logs to splunk using Jamf Pro Add-on for Splunk (https://splunkbase.splunk.com/app/4729/).

I have defined the inputs as per the documentation. However, I am not getting logs on indexer. I can see below errors in splunkd.log and jamf_pro_addon_for_splunk_jamfcomputers.log.

Any suggestions regarding this will be greatly appreciated.

Thanks,

Error 1:

2022-01-28 13:44:58,590 ERROR pid=10751 tid=MainThread file=base_modinput.py:log_error:309 | Get error when collecting events.

Error 2:

Re: Jamf Pro logs integration with Splunk - Not getting logs

SinghK — Sat, 29 Jan 2022 04:03:06 GMT

have you checked the UID and PWD are correct on and the have the correct permissions. As this looks more like permissions or incorrect creds issue.

topic Jamf Pro logs integration with Splunk - Not getting logs in Splunk Enterprise

Jamf Pro logs integration with Splunk - Not getting logs

Re: Jamf Pro logs integration with Splunk - Not getting logs