You’ll be interested in -
Use REGEX to filter on device mac presence in payload, then JSONPATH to get the value.