I recently got the SCCM app working with Splunk 7.1.3 and DBConnect 3.2.0. I used the SCCM app as a template and modified as necessary, granted it took me a few months to get everything working right:
I used SQL Server manager to create new views based on the dbconnect queries in the package. This was mainly because I could input them into dbconnect and run them, but when I went to save them I'd receive an error.
I rewrote most of the dashboards and pages to work with the new queries and had success with them, The only issue so far is that because the rising column doesn't work with the queries, some of the time pickers don't work, or I had to get creative with time sorting.
After that it was just setting up alerts for the SCCM daily/weekly/monthly recommended monitoring.
Let me know if you need more specific pointers on getting it working.
I need to be able to leverage splunk to confirm machines that are on the network are accounted for in sccm... and as sccm is notorious for not always checking in correctly I do't know another way. Also looking for an updated SCCM connector for splunk 7.x
Hi TobiasBoone, We are planning to install the SCCM app in our organization and we are using 6.6.1 splunk Enterprise version, but I am not finding any good documentation which can explain how to configure the SCCM app to pull the information in splunk. So if you can share me the procedure or steps to configure this, it will be really great help.
thanks in advance.