This Add-on provides CIM Authentication data model extractions for JumpCloud Directory Insights data collected in JSON format NEW: Version 1.2 and above use sourcetype 'jumpcloud:json' Prior versions use sourcetype 'jumpcloud:di:json' NEW: Use 'JumpCloud Directory Insights add-on' developed by Maciej Duda (https://splunkbase.splunk.com/app/6613) to collect the data directly from the TA without needing to use S3 buckets and AWS Lambda Functions. JumpCloud have provided a solution using an AWS Lambda function to collect and store JumpCloud Directory JSON events into an S3 bucket - which can subsequently be collected by Splunk: https://jumpcloud.com/blog/aws-serverless-app-directory-insights