Drop the "attributes" wrapper. Since 6.7.2, endpoint attributes are filtered as top-level fields, so it's filter={"Installation":"True"}, which is what zaffiro found in post #4. The ClearPass REST API Filtering page shows a filter as one flat field-to-value ...