Skip to main content
Question

Jamf Pro logs to SEIM

  • Mar 16, 2023 4:14 PM UTC
  • 3 replies
  • 78 views

Forum|alt.badge.img+1

Is it possible to push the Change Management Logs and Jamf Pro Access Logs to a SEIM like SumoLogic? We currently have a ComputerCheckIn webhook event that's set up to send data to SumoLogic but I don't see an option under the Webhook Event types for the two logs I mentioned above.

3 replies

jamf-42
Forum|alt.badge.img+17
  • Esteemed Contributor
  • Mar 16, 2023 4:21 PM UTC

if its jamf cloud.. you can pay jamf $$$$$$$$$$$$$$ for a dedicated instance.. and this will allow.. 


sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • Mar 16, 2023 5:20 PM UTC

@carl00 What @jamf-42 is referring to is called Jamf Premium Cloud (https://resources.jamf.com/documents/products/documentation/jamf-premium-cloud.pdf) and it adds a number of additional capabilities besides log streaming. I don't know if I'd call it "$$$$$$$$$$$$$$," but the list price is currently $20K/year. 


AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • Mar 20, 2023 1:45 PM UTC

@carl00 What @jamf-42 is referring to is called Jamf Premium Cloud (https://resources.jamf.com/documents/products/documentation/jamf-premium-cloud.pdf) and it adds a number of additional capabilities besides log streaming. I don't know if I'd call it "$$$$$$$$$$$$$$," but the list price is currently $20K/year. 


Considering what device management costs in general, I am not sure if JAMF is "$$$$$$$$$$$$$$" either. If an org wants functions like SEIM redirection, they should be ready to pay for it. At my org our JAMF cost is a drop in the bucket compared to our Microsoft cost.