• Comprehensive Asset Inventory: Collect detailed data on devices managed in Jamf, including device enrollments, pre-stages, hardware, and software configurations.
• Customizable Queries: Leverage SQL to analyze and query your Jamf data directly from your database.
• Cross-Platform Integration: Combine Jamf data with other IT or cloud platforms like AWS, GCP, and more.
• Secure Deployment: Keep sensitive data safe with self-hosted options.

• Device Enrollments: Details about devices enrolled in Jamf, including configurations and enrollment statuses.
• Computer and Mobile Device Data: Information on hardware, operating systems, security settings, and installed software for computers and mobile devices.
• Pre-stage Configurations: Pre-stage setup data for both computers and mobile devices, such as default pre-stages, departments, and mandatory configurations.
• User and Location Data: Assignments of devices to specific users or locations for inventory tracking.
• Purchasing Information: Details about asset procurement and associated metadata.

Getting Started with the Jamf Plugin #

1. Obtain API Credentials:

   Start by generating an API token to access your data from your Jamf instance. Follow the Jamf API documentation to retrieve your token.
2. Install CloudQuery CLI:

   Download and install the CloudQuery CLI on your machine by following the steps on our download page.
3. Set up the Sync Configuration:

   Create a CloudQuery configuration file by running the following init command. You can use any supported destination, but for this example, we will use PostgreSQL.

   cloudquery init --source=jamf --destination=postgresql

   This command will create a jamf_to_postgresql.yaml file in your current directory.
4. Update the Configuration File:

   Open the generated config file and replace the placeholders with your details:

   • ${JAMF_INSTANCE_URL}: Replace with the base URL of your Jamf Pro instance (e.g., https://your-jamf-instance.jamfcloud.com).
   • ${JAMF_ACCESS_TOKEN}: Replace with the API token generated in step 1.
   • ${POSTGRESQL_CONNECTION_STRING}: Replace with the connection string for your PostgreSQL database.
5. Sync with CloudQuery:

   Next, run the sync command to extract data from Jamf into your data destination:

   cloudquery sync jamf_to_postgresql.yaml

   For more details, refer to the Jamf Source Integration documentation.

How to Analyze your Jamf data #

How to Identify Jamf Devices with Outdated OS #

SELECT
    general->>'device_name' AS device_name,
    operating_system->>'version' AS os_version
FROM
    jamf_computers
WHERE
    operating_system->>'version' < '12.0';

How to Track Unassigned Pre-stages in Jamf #

SELECT
    display_name,
    department
FROM
    jamf_computer_prestages
WHERE
    department IS NULL;

How to Audit Security Configurations with Jamf #

SELECT
    general->>'device_name' AS device_name,
    disk_encryption->>'filevault_enabled' AS encryption_status
FROM
    jamf_computers
WHERE
    disk_encryption->>'filevault_enabled' = 'false';

How to integrate Wiz and Jamf Data #

SELECT
    jc.general->>'device_name' AS device_name,
    jc.operating_system->>'version' AS os_version,
    wiz.vulnerabilities->>'vuln_id' AS vulnerability_id,
    wiz.vulnerabilities->>'severity' AS severity
FROM
    jamf_computers jc
JOIN
    wiz_findings wiz
ON
    jc._cq_id = wiz._cq_parent_id
WHERE
    wiz.vulnerabilities->>'severity' = 'critical';

Summary #

FAQs #