Posted on 03-16-2023 09:14 AM
Is it possible to push the Change Management Logs and Jamf Pro Access Logs to a SEIM like SumoLogic? We currently have a ComputerCheckIn webhook event that's set up to send data to SumoLogic but I don't see an option under the Webhook Event types for the two logs I mentioned above.
Posted on 03-16-2023 09:21 AM
if its jamf cloud.. you can pay jamf $$$$$$$$$$$$$$ for a dedicated instance.. and this will allow..
Posted on 03-16-2023 10:20 AM
@carl00 What @jamf-42 is referring to is called Jamf Premium Cloud (https://resources.jamf.com/documents/products/documentation/jamf-premium-cloud.pdf) and it adds a number of additional capabilities besides log streaming. I don't know if I'd call it "$$$$$$$$$$$$$$," but the list price is currently $20K/year.
Posted on 03-20-2023 06:45 AM
Considering what device management costs in general, I am not sure if JAMF is "$$$$$$$$$$$$$$" either. If an org wants functions like SEIM redirection, they should be ready to pay for it. At my org our JAMF cost is a drop in the bucket compared to our Microsoft cost.