Can't get Extension attribute value from Advanced Search in Splunk

ukarulis
New Contributor II

Dear JAMF admins,

I have issues getting all data from JAMF Advanced Search in Splunk Jamf Pro Add-on.

I have set correct settings for input in Splunk (API Call Name – Computers, Search Name – Splunk).

The thing is that it pulls some data as Computer Name, Last Check in, IP address e.t.c., but it doesn’t pull extension attribute values which are added to display in specific Advanced Search in JAMF which has the same name as I’ve set up in Splunk input.

I can get extension attribute data using custom api link “/JSSResource/computers” from another input I’ve created, but data is pretty messed up and I can’t properly get information I need and format as per my needs.

Does anyone had similar issue and if yes – how and did you solve it?

Best regards,

0 REPLIES 0