Skip to main content

Hi,
I am trying to ingest jamf-pro logs at the end i see this message:"Please Note,
An API key is needed to complete feed setup. To generate an API key, go to the Google Cloud console: APIs & Services > Credentials
Learn how to set up API keys" after i create this API key where should i use it? Is there any related documentation for Jamf-pro connection. Thanks in advance.

Hi yasinmnk,


Which method are you using to ingest jamf logs to secops?


Hi @Ben_T  i am using Feed and under that as source type i am using webhook


Thanks for that info. Did you click through the feed creation and then copy the key that gets created in the next step?



 


 


So. this is a SIEM questions, not SOAR.



For webhook feed, two credentials:

1. secret key -> from the SecOps feed config page 


2. API key -> from the BYOP project which ties to the SecOps instance: 



  1. Go to the Google Cloud console Credentials page.

  2. Click Create credentials, and then select API key.

  3. Restrict the API key access to the Chronicle API.


Reply