search

elastic / beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash
https://www.elastic.co/products/beats
Other
12.07k stars 4.89k forks source link

[EA Input] Adding support for Jamf as a provider #40073

Closed jamiehynds closed 1 week ago

jamiehynds commented 1 month ago

We are about to develop an integration with Jamf Pro (epic here) and in order to support the use cases outlined in the epic, we need the ability to ingest device (typically computer & mobile) metadata, similar to our integrations with EntraID and Okta. Information regarding inventory data collection available here: https://learn.jamf.com/en-US/bundle/jamf-pro-security-overview/page/Data_Collection.html

In order to support the ingest of this data, we need to add Jamf as a supported provider to our Entity Analytics input.

To view the use cases we have in mind, please see the dashboard section of the Jamf Pro epic. Details of the relevant API endpoints can also be found in the Architecture section.

We have access to a Jamf Pro instance and @txhaflaire from Jamf is also available for any technical questions we may have as we work through the Jamf integration. @jaredburgettelastic may also have some thoughts of the device fields we need in order to support our Entity Analytics capabilities too.

elasticmachine commented 2 weeks ago

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)