Posted on 10-12-2020 02:36 AM
I am attempting to integrate Splunk Cloud with our Cloud hosted JamfPro instance. I have configured the Splunk Jamf Add On with (what I think) is the right configuration and the Splunk logs show a successful connection. However, no data is being collected. The Splunk logs show
https://jamfcloudinstance.com:443 "GET /JSSResource/advancedcomputersearches/name/test HTTP/1.1" 200 None
Which indicates a successful connection.
The error message that does appear is:-
event = helper.new_event(data=ElementTree.tostring(xml_event,encoding="utf-8", method="xml",short_empty_elements=True).decode(), index=index, host=host)
TypeError: tostring() got an unexpected keyword argument 'short_empty_elements'
Has anyone had this issue before and successfully integrated JamfPro with Splunk?
Posted on 10-12-2020 07:55 AM
@rosswheatley check your version of python. Are you running version 3 or 2.7? Also are you installing the correct version of the jamf addin for the currently installed version of splunk?