topic Re: Integration Intel vPro with Splunk in Intel vPro® Platform

Integration Intel vPro with Splunk

mnaid1 — Mon, 30 Sep 2019 13:29:37 GMT

Do we have any API's to integrated SPLUNK with Intel vPro and looking for some architecture about the functionality

Re: Integration Intel vPro with Splunk

JoseH_Intel — Tue, 01 Oct 2019 07:25:12 GMT

Hello mnaid1,

Thank you for joining the community

Could you detail the way and purpose to integrate vPro/AMT with Splunk?

The vPro/AMT is a remote management feature that can be integrated with some MS tools like SCCM, Active Directory pretty much for inventory and management of systems. It is possible to create custom scripts for specific monitoring/deployment tasks. The AMT tools are mainly supported on Windows environments but some tools are Linux compatible.

The following URL will take you some induction videos

Best regards

Jose A.

Intel Customer Support Technician

A Contingent Worker at Intel

Re: Integration Intel vPro with Splunk

mnaid1 — Tue, 01 Oct 2019 13:29:15 GMT

Thanks Jose

The Splunk integration required for tracking, security and audit purpose for the end-points

Re: Integration Intel vPro with Splunk

JoseH_Intel — Wed, 02 Oct 2019 06:21:30 GMT

Hello mnaid1,

Thanks for the clarification. So far there are no API's or addons to integrate splunk with vPro/AMT that I am aware of. Let me research with our engineering department to get a more up to date answer for you. Will get back as soon as I have news.

Best regards

Jose A.

Intel Customer Support Technician

A Contingent Worker at Intel

Re: Integration Intel vPro with Splunk

JoseH_Intel — Fri, 04 Oct 2019 11:15:24 GMT

Hello mnaid1,

This is what I got from engineering: "There’s really not a whole lot that can be done other than maybe export the AMT Event logs and AMT Audit logs on a schedule with the PowerShell module and then have Splunk consume those. To do that it would need to either install the PowerShell module on each computer and run the scheduled task locally, or export those for each remotely."

Let me know if this helps a little

Jose A.

Intel Customer Support Technician

A Contingent Worker at Intel

Re: Integration Intel vPro with Splunk

JoseH_Intel — Tue, 08 Oct 2019 09:53:56 GMT

Hello mnaid1,

Do you have any updates, questions or comments in regards to this issue?

If you consider the issue to be completed please let us know so we can proceed to mark this thread as resolved. This support interaction will be marked as resolved automatically in the next 72 hours if no activity is received.

Regards

Jose A.

Intel Customer Support Technician

A Contingent Worker at Intel

Re: Integration Intel vPro with Splunk

JoseH_Intel — Fri, 11 Oct 2019 08:29:50 GMT

Hello mnaid1,

We will proceed to mark this thread as resolved. If you have further issues or questions just go ahead and create a new topic.

Jose A.

Intel Customer Support Technician

A Contingent Worker at Intel