Jamf Protect Event Collector

Use this integration to fetch audit logs events, alerts events and computer assets from Jamf Protect to Cortex XSIAM.

Analytics & SIEM · JamfProtect

Configuration parameters

  • base_url — Server URL (e.g., https://example.protect.jamfcloud.com) (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • client — Client ID (required)
  • max_fetch_alerts — Max alert events per fetch
  • max_fetch_audits — Max audit events per fetch
  • assetsFetchInterval — Fetch Computer Assets Interval
  • isFetchEvents — Fetch Events
  • isFetchAssets — Fetch Assets

Commands (2)

  • jamf-protect-get-computer-assets

    Gets computer assets from Jamf Protect.

  • jamf-protect-get-events

    Gets events from Jamf Protect.