The Jamf Pro Add-On for Splunk does not work with Splunk Cloud.
We have spent days trying to get this working with both Jamf and Splunk, only to find that this setup is currently incompatible. This has been confirmed by both Jamf and Splunk.
It appears that the 'Jamf Protect Add-On' is compatible with Splunk Cloud.
Hopefully these two add-ons are similar in construction and the Jamf Pro Add-On can be updated ASAP.
https://splunkbase.splunk.com/app/4729
https://learn.jamf.com/en-US/bundle/technical-paper-splunk-current/page/Integrating_Splunk_with_Jamf...
Thanks!
Hello @mwmw,
I can see on Splunkbase that the JAMF Pro add-on for Splunk is now cloud compatible. The latest version was released on June only.
Thanks,
Tejas.