topic Re: Is there any Mobile Iron device(MDM) integration documentation. in Dashboards & Visualizations

Is there any Mobile Iron device(MDM) integration documentation.

N92 — Wed, 03 Jan 2018 13:44:15 GMT

I found some add on for dashboard. But we are facing some issue in integration like they are giving single option. How can i add multiple indexer in it.

Re: Is there any Mobile Iron device(MDM) integration documentation.

gcusello — Wed, 03 Jan 2018 15:35:39 GMT

Hi N92,
it's one year that I don't see MobileIron, but I remember that in MobileIron Appliance there's an embedded Splunk Forwarder and it must only be enabled by MobileIron Administration Console: it needs only to know Indexers, ports and use of SSL or not.
It isn't possible to configure anything else, because all the correct inputs to send logs to the MobileIron App for Splunk are correctly configurated and not modifiable.

In addition Forwarder is present only in Core and not in Sentry.
To monitor it, you have to configure this server to send logs by syslog and create your own dashboards on Splunk.

App and the few documentation is downloadable from MobileIron Support Site: one year ago documentation was very poor, but I could be not updated!

I hope to be helpful for you.

Bye.
Giuseppe

Re: Is there any Mobile Iron device(MDM) integration documentation.

N92 — Wed, 03 Jan 2018 15:44:29 GMT

Is there need to configure both(splunk forwarder & syslog).
What is the meaning to selecting SSL option? Means If we have enabled ssl on DS & indexers then it must be selected?

Re: Is there any Mobile Iron device(MDM) integration documentation.

gcusello — Wed, 03 Jan 2018 15:51:27 GMT

Hi N92,
you can configure your forwarders to send logs using SSL or not, it depends by your requisites and by the configuration you have on your Indexers.

Only one additional detail:
You can use Forwarder on MobileIron Core and you don't need to use syslogs on it.
Instead you need to use syslogs on Sentry because there isn't an embedded Forwarder.

Bye.
Giuseppe

Re: Is there any Mobile Iron device(MDM) integration documentation.

N92 — Wed, 03 Jan 2018 16:20:13 GMT

Thanks cusello.

Re: Is there any Mobile Iron device(MDM) integration documentation.

schandrasekar — Wed, 14 Oct 2020 00:16:40 GMT

Hi, I have same question. Our exsiting splunk architecture UF->HF->IDX->SH. My question here, is that the only way to get data from MobileIron Core to Splunk or is there a way to send the data to HF instead of IDX

Re: Is there any Mobile Iron device(MDM) integration documentation.

schandrasekar — Wed, 14 Oct 2020 00:19:50 GMT

Hi ,

Our existing splunk architecture UF->HF->IDx->SH

MY question here is, is that the only way to get data from MobileIron Core to splunk? How do i send the data to HF instead of IDX?

thanks,
Sangeetha