Jamf_Remote_Assist_Info

Update as of Jamf Pro 11.2

Jamf Pro 11.2 has included logging for JRA. You are welcome to use this workflow if you like it better but may find the built in feature easier to navigate.

A workflow to enable better understanding of Jamf Remote Assist Sessions

This repository contains the following:

• EA to provide count of files uploaded from MacOS device to Remote Admin Endpoint
• EA to provide file names of transferred files from Remote Admin Endpoint to MacOS device
• EA to implement Logging workflow
• README.md to walk through Logging Workflow
• (Coming soon!) Script to safely delete files containing counts in EA that will reset values at next check-in

This repository does NOT contain the following:

• A suitable long term solution for auditing logs in Jamf Remote Assist

Setup

Start by adding the Jamf_Remote_Device_ID_EA to your environment

Enable searching for the value in Jamf_Remote_Device_ID_EA by going to Settings> Computer Management> Inventory Display and checking the box for the EA

Log Review

Run the script Remote_Assist_Sessions.sh and find the sessions you want to review.

Note the output for:

• deviceID
• sessionAdminId

To find the -deviceID associated with the session:
-Run a blank search in Computers> Search Inventory
-Copy and paste the deviceID from the script in the "Filter Results" section

To find the user associated with -sessionAdminID
-Go to https://yourserver.jamfcloud.com/accounts.html?id=##&o=r
-Replace ## with the -sessionAdminID to find the name of the account that initiated the Jamf Remote Session

Client Logs

Logs for Jamf Remote Assist are stored in /Users/Shared/jamfdata/
You can manually collect the logs or use Jamf-Log-Grabber, which is designed for getting all installed Jamf Application Logs. Download the latest copy of Jamf Log Grabber here