I am attempting to integrate Splunk Cloud with our Cloud hosted JamfPro instance. I have configured the Splunk Jamf Add On with (what I think) is the right configuration and the Splunk logs show a successful connection. However, no data is being collected. The Splunk logs show
https://jamfcloudinstance.com:443 "GET /JSSResource/advancedcomputersearches/name/test HTTP/1.1" 200 None
Which indicates a successful connection.
The error message that does appear is:-
event = helper.new_event(data=ElementTree.tostring(xml_event,encoding="utf-8", method="xml",short_empty_elements=True).decode(), index=index, host=host)
TypeError: tostring() got an unexpected keyword argument 'short_empty_elements'
Has anyone had this issue before and successfully integrated JamfPro with Splunk?