Solutions/Jamf Protect/Parsers/JamfProtectUnifiedLogs.yaml

id: a848f8db-4cf8-4a64-9bbc-58f4183f2bb1
Function:
  Title: Parser for Jamf Protect Unified Log Events
  Version: '3.2.4'
  LastUpdated: '2025-03-25'
Category: Microsoft Sentinel Parser
FunctionName: JamfProtectUnifiedLogs
FunctionAlias: JamfProtectUnifiedLogs
FunctionQuery: |
    jamfprotectunifiedlogs_CL
    | extend EventStartTime = unixtime_seconds_todatetime(tolong(input.match.event.timestamp))