Using Kafka for Log Files

Jamf Protect Offline Deployment Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
Requirements
Important:

Certificates specified in the Client Certificate Common Name field must be installed in the system Keychain on any host computers using this configuration.

This can be done by distributing the certificate bundle as a computer-level configuration profile using Jamf Pro or your selected MDM solution.

While scoping this configuration profile, the following two settings in Jamf Pro (or equivalent settings in your MDM solution) must be enabled for Jamf Protect to have permissions to use the client certificate:

  • Allow all apps access

  • Allow export from keychain

For more information on distributing certificates using Jamf Pro, see Certificate Distribution Using Configuration Profiles.

  1. In Jamf Protect, navigate to Actions > Data Endpoints and click + Add.
  2. Select Kafka and click + Add.
  3. Configure your Kafka broker transport.
    1. In the Host field, enter the Kafka broker hostname or IP address where the log data is sent.

      For example, kafka.jamf.com or 192.0.2.1.

    2. In the Port field, enter the port purposed for your Kafka broker's use.

      The default broker port for secure transport using SSL encryption is 9093.

    3. In the Topic field, enter the routing category name of the Kafka broker's data stream to which you send log data and will subscribe.
    4. In the Server certificate common name (CN) field, enter the common name for the x.509 certificate used to connect to the Kafka broker.

      For example, kafka1.jamf.com.

      Note:You can override server certificate verification by inputting no_verify in the server certificate common name field.
    5. (Optional) In the Client certificate common name (CN) field, enter the common name for the x.509 certificate used by the client connecting to the Kafka broker.
  4. Select if you want to send Telemetry and Unified Logs to the Kafka broker.
  5. Click Save.