- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Re: Anyone have an SCCM app that works with Splunk...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Anyone have an SCCM app that works with Splunk 7.x?
I've downloaded the 3 yr old app, that says it works for 6.2, but I can't seem to get it working with Splunk 7. Anything that anyone can offer would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I posted an answer in another page that may help. I rewrote all the DB queries so it's all native to the SCCM app.
Re: Splunk community NEEDS an answer for getting S... - Splunk Community
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I recently got the SCCM app working with Splunk 7.1.3 and DBConnect 3.2.0. I used the SCCM app as a template and modified as necessary, granted it took me a few months to get everything working right:
I used SQL Server manager to create new views based on the dbconnect queries in the package. This was mainly because I could input them into dbconnect and run them, but when I went to save them I'd receive an error.
I rewrote most of the dashboards and pages to work with the new queries and had success with them, The only issue so far is that because the rising column doesn't work with the queries, some of the time pickers don't work, or I had to get creative with time sorting.
After that it was just setting up alerts for the SCCM daily/weekly/monthly recommended monitoring.
Let me know if you need more specific pointers on getting it working.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't, but I wish Splunk was willing to put even a little effort into addressing this problem
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
+1..... trying to get it to work with 6.3. It installs but there is no Settings/config for it in the interface
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I need to be able to leverage splunk to confirm machines that are on the network are accounted for in sccm... and as sccm is notorious for not always checking in correctly I do't know another way. Also looking for an updated SCCM connector for splunk 7.x
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi TobiasBoone, We are planning to install the SCCM app in our organization and we are using 6.6.1 splunk Enterprise version, but I am not finding any good documentation which can explain how to configure the SCCM app to pull the information in splunk. So if you can share me the procedure or steps to configure this, it will be really great help.
thanks in advance.
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
