Splunk Cloud/JamfPro Integration

[rosswheatley]

I am attempting to integrate Splunk Cloud with our Cloud hosted JamfPro instance. I have configured the Splunk Jamf Add On with (what I think) is the right configuration and the Splunk logs show a successful connection. However, no data is being collected. The Splunk logs show

https://jamfcloudinstance.com:443 "GET /JSSResource/advancedcomputersearches/name/test HTTP/1.1" 200 None

Which indicates a successful connection.

The error message that does appear is:-

event = helper.new_event(data=ElementTree.tostring(xml_event,encoding="utf-8", method="xml",short_empty_elements=True).decode(), index=index, host=host)

and

TypeError: tostring() got an unexpected keyword argument 'short_empty_elements'

Has anyone had this issue before and successfully integrated JamfPro with Splunk?

Thanks

[rqomsiya]

@rosswheatley check your version of python. Are you running version 3 or 2.7? Also are you installing the correct version of the jamf addin for the currently installed version of splunk?