3/17/2023 0 Comments Jamf pro server tools![]() Combine this with Smart Groups to find all of the computers with these scripts installed This collects the scripts that could be deployed to a computer. These are applications that the Jamf Pro, if it has the ability, will remove from the device This colelcts applications that have been marked restricted by the Jamf Pro administrator. This collects every application installed on a mobile device that the Jamf Pro server has seen. This collects every application that the Jamf Pro server has seen on devices since it has started collecting. ![]() You must be connected with Apple School or Business Manager to use this feature This collects the software that you are licensed to use from the Apple Store. This collects the User Direcotry Bindings and authentication that devices use for user lookup. It also returns details related to what is controlled by the configuration profile This collects all of the Computer Configurations that could be applied to a computer. This collects the configuration profiles that would be applied to computers or mobile devices that are user enrolled, formerally Bring Your Own Device profiles This allows you to iterate across the mobile devices and pull every iPad, iPhone, appleTV, and other mobile devices. There is no restrictions and the only field that is dropped is the FONTS field. This allows you to iterate across the computers and pull every computer. If you use the name it will return the computer that last reported that has that system name. Example would be /JSSResource/computers/id/10 this would return only the computer with the JSS_ID equal to 10. If you enter a NAME or ID field in the custom URL it will only call that object directly. ![]() As an example if you call /JSSResource/computers/ it will call all computers. The API endpoints work such that if you call any of the JSSResource endpoints if you call the base it will take call that and then iterate across all objects that return. Copy paste these code paths into the custom fields to get the data described or go to the Jamf API page found here: Structure Below is a list of common endpoints that you may want to collect against. To use these highlight the Computer or Mobile Device tab and then in the Custom URL field enter the Name of the Advanced Search.Ĭustom API endpoints allows you to collect information from the Jamf Pro by integrating directly with the API. This allows you to reduce your logging to only values you want or can remove what you deem Personally Identifiable Information. Only Data fields that are checked will be ingested by the Splunk Event Writer. You can also control the data that goes into the Splunk engine by using the Display section. For an example you can collect on only managed devices so you don't collect on devices you no longer are responsible for. The power of these is you can use the Criteria section to narrow your selection of devices. The Computers tab and Mobile Devices tabs use a specific Jamf Pro endpoint referred to as Advanced Computer Searches. Check back in the next version where we will have improved documentation Advanced Computer and Mobile Search They use fewer API Calls, have SourceTypes, Use JSON, and allow you to filter both the device and the information on the device to reduce data being written to your Splunk Event Writer. The Modular inputs for JamfComputers and JamfMobile devices have a set of improvements that are highly desired. Create and expand on visuals using tools in Splunks ecosystem Use JamfComputers or JamfMobile Devices Import several system settings fields using the Custom API field Import Computer and Mobile Device data from multiple Jamf Pro instances Jamf Modular Input for Splunk Current Version 2.10.8 New Features!
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |