Integration of AMP for endpoints with microsoft SCOM

[t.raavig]

Does anybody have any exprience with AMP for endpoints forwarding information/logs to microsoft SCOM . Our customer wants to integrate AMP with SCOM . The only thing i have found is that maybe it can be solved devopling api rests. But would realy like to know if anybody  has any experince before I dig into devopling api rests.

Best Regards

Tom 

[David Janulik · Accepted solution]

The work can be done with API. This is easy to do with powershell a built in method called “Invoke-RestMethod” it is part of the default MS powershell utility module.

Guide to use it: 

https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/invoke-restmethod?view=powershell-5.1

Regarding these examples from the doc, you should get. 

Note 1: When using this method in powershell, the response is JSON (like AMP API is) powershell will convert the response automatically to objects so handling of json data may differ vs. what you are used to (no difference in the information its just accessing it via Index/Key may be a little different) 

Note 2: this module was made available in PS 3.0 and  greater.

For a specific help on composing API, please open a support ticket.

Best Regards

David

[t.raavig]

Hi David

Thank you very much.

Looks likes this will give us a possiblity to solve the case. I will try this out together  with the customer.

Best regards

tom