Jamf Remote Assist 1.3.0 no longer users /users/shared for log storing and utilizes unified logging. Because of that, this workflow will no longer work. Check out built in Jamf Pro features for JRA logs and Jamf Log Grabber for any additional reporting you may want..
Jamf Pro 11.2 has included logging for JRA. You are welcome to use this workflow if you like it better but may find the built in feature easier to navigate.
This repository contains the following:
- EA to provide count of files uploaded from MacOS device to Remote Admin Endpoint
- EA to provide file names of transferred files from Remote Admin Endpoint to MacOS device
- EA to implement Logging workflow
- README.md to walk through Logging Workflow
- (Coming soon!) Script to safely delete files containing counts in EA that will reset values at next check-in
This repository does NOT contain the following:
- A suitable long term solution for auditing logs in Jamf Remote Assist
Start by adding the Jamf_Remote_Device_ID_EA to your environment
Enable searching for the value in Jamf_Remote_Device_ID_EA by going to Settings> Computer Management> Inventory Display and checking the box for the EA
Run the script Remote_Assist_Sessions.sh and find the sessions you want to review.
Note the output for:
- deviceID
- sessionAdminId
To find the -deviceID associated with the session:
-Run a blank search in Computers> Search Inventory
-Copy and paste the deviceID from the script in the "Filter Results" section
To find the user associated with -sessionAdminID
-Go to https://yourserver.jamfcloud.com/accounts.html?id=##&o=r
-Replace ## with the -sessionAdminID to find the name of the account that initiated the Jamf Remote Session
Logs for Jamf Remote Assist are stored in /Users/Shared/jamfdata/
You can manually collect the logs or use Jamf-Log-Grabber, which is designed for getting all installed Jamf Application Logs.
Download the latest copy of Jamf Log Grabber here