Splunk Enterprise

Jamf Pro logs integration with Splunk - Not getting logs

bsanjeeva
Explorer

Hi Splunkers,

I am integrating Jamf pro logs to splunk using Jamf Pro Add-on for Splunk (https://splunkbase.splunk.com/app/4729/).

I have defined the inputs as per the documentation. However, I am not getting logs on indexer. I can see below errors in splunkd.log and jamf_pro_addon_for_splunk_jamfcomputers.log. 

Any suggestions regarding this will be greatly appreciated.

Thanks,

Error 1:

2022-01-28 13:44:58,590 ERROR pid=10751 tid=MainThread file=base_modinput.py:log_error:309 | Get error when collecting events.

Error 2:

Screen Shot 2022-01-28 at 4.38.03 PM.png

Labels (1)
Tags (1)
0 Karma

SinghK
Builder

have you checked the UID and PWD are correct on and the have the correct permissions. As this looks more like permissions or incorrect creds issue.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...