Configuring Analytic Action Settings in Jamf Protect

Jamf Protect Documentation

Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

To send analytic detections to Jamf Protect, select Add to Jamf Pro Smart Group and configure a value that will populate a Jamf Protect extension attribute.

Best Practice:

Optimizing analytic remediation with Jamf Pro

Analytic remediation uses extension attributes to submit computer inventory to Jamf Pro for calculating smart group membership, enabling automated scoping of remediation workflows through device management. This may add time and network traffic to the inventory collection process. Using this integration with analytics that detect recurring, high frequency events may cause unnecessary strain on your Jamf Pro server. Jamf recommends the following:
  • Integrate analytics only of high importance that are essential to remediate automatically.

  • Integrate analytics with remediation workflows that aim to resolve the root cause detected by the analytic to prevent unnecessary strain on Jamf Pro

.
  1. In Jamf Protect, click Analytics.
  2. Do one of the following:
    • Select the analytic you want to edit and click Update Actions.

    • Click Create Custom Analytic.

  3. Select Add to Jamf Pro Smart Group.
  4. Enter a value that will populate the Jamf Pro extension attribute in the Identifier field.
    Note:

    This value must match the field defined in your Jamf Protect smart group criteria in Jamf Pro.

    Jamf Protect macOS add analytic to Jamf Pro Smart Group option with Identifier field containing "Analytic"
  5. Click Save.

When detected, the analytic will now send data to a Jamf Protect extension attribute.

To create a Jamf Protect extension attribute in Jamf Pro, see Creating an Extension Attribute.