https://community.splunk.com/t5/Getting-Data-In/Integration-of-Jamf-pro-with-splunk/m-p/691813#M115040 <P>Please guide me on integrating jamf-pro with splunk step by step.</P><P><A href="https://splunkbase.splunk.com/app/4729" target="_blank">Jamf Pro Add-on for Splunk | Splunkbase</A><BR /><BR />This is the add-on I need to install.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jamf-add-on.PNG" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/31536i9A489AAEBA63C3D9/image-size/large?v=v2&amp;px=999" role="button" title="jamf-add-on.PNG" alt="jamf-add-on.PNG" /></span></P><P>Please guide me on which instance (HF, Syslog servers, Search Heads, Indexers, Cluster master, License manager, Deployment server) should I install this add-on?&nbsp;</P><P>And custom index, should it be created on cluster master and push the bundle to all indexers?</P><P>should I create on all 3 search heads and 1 adhoc search head that we have?</P><P>And please guide how the HF forwards the required events to this newly created index? how to let HF know that there is a custom index?</P> Thu, 27 Jun 2024 06:41:40 GMT veeeeruuuu 2024-06-27T06:41:40Z https://community.splunk.com/t5/Getting-Data-In/Integration-of-Jamf-pro-with-splunk/m-p/691813#M115040 <P>Please guide me on integrating jamf-pro with splunk step by step.</P><P><A href="https://splunkbase.splunk.com/app/4729" target="_blank">Jamf Pro Add-on for Splunk | Splunkbase</A><BR /><BR />This is the add-on I need to install.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jamf-add-on.PNG" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/31536i9A489AAEBA63C3D9/image-size/large?v=v2&amp;px=999" role="button" title="jamf-add-on.PNG" alt="jamf-add-on.PNG" /></span></P><P>Please guide me on which instance (HF, Syslog servers, Search Heads, Indexers, Cluster master, License manager, Deployment server) should I install this add-on?&nbsp;</P><P>And custom index, should it be created on cluster master and push the bundle to all indexers?</P><P>should I create on all 3 search heads and 1 adhoc search head that we have?</P><P>And please guide how the HF forwards the required events to this newly created index? how to let HF know that there is a custom index?</P> Thu, 27 Jun 2024 06:41:40 GMT https://community.splunk.com/t5/Getting-Data-In/Integration-of-Jamf-pro-with-splunk/m-p/691813#M115040 veeeeruuuu 2024-06-27T06:41:40Z