Skip to main content
Jamf Nation, hosted by Jamf, is a knowledgeable community of Apple-focused admins and Jamf users. Join us in person at the ninth annual Jamf Nation User Conference (JNUC) this November for three days of learning, laughter and IT love.

Collecting Logs in Jamf Connect Login


Starting with Jamf Connect Login 1.0.1, you can collect logs to help understand, configure, and troubleshoot the application processes. Log files are written locally in the following location:


Note: This log file is deleted during each reboot of the computer.

Enabling Log Streaming

You can using log streaming to view log entries made by Jamf Connect Login in real-time. To enable log streaming for Jamf Connect Login, follow these steps:

  1. Using secure shell (SSH), log in to the computer you want to view the logs for.
  2. Execute the following command in Terminal:
    log stream --predicate 'subsystem == "com.jamf.connect.login"' --debug --info
  3. Log in as the user you want to view the logs for.
  4. To quit the log program, press Control-C.

Reading Logs

Each log entry contains a log type and category to help you determine what part of the application made the entry. Log entries are written in the following format:

{date} {application_bundle: com.jamf.connect.login} - {type} - {log_category} - {message}

Log Types

The following log types are used:

  • Debug
  • Info
  • Error
  • Fault

Log Categories

Jamf Connect Login includes the following log categories in each log, which indicate the loginwindow mechanism or application component that made the log entry:

  • Common
  • UI
  • CheckADMech
  • CreateUserMech
  • NoLoSwiftMech
  • NoLoBaseMech
  • LoggerMech
  • DemobilizeMech
  • PowerControlMech
  • EnableFDELog
  • SierraFixesLog
  • KeychainAdd
  • RunScript
  • EULA
  • Notify
  • Setup
  • Settings
  • AuthUI
  • CheckOktaMech
  • Licensing
  • OpenDirectory


The commands below are examples of how you can use Terminal to collect logs from Jamf Connect Login.

Execute the following to list all log entries for Jamf Connect Login from the previous 10 minutes:

log show --predicate 'subsystem == "com.jamf.connect.login"' --debug --info --last 10m

Execute the following to list all log entries related to Jamf Connect Login, including Apple processes.

log show --predicate 'process == "SecurityAgent"' --debug --info --last

Additional Information

For additional information, see Jamf Connect Login in the Jamf Connect Administrator's Guide.

Like Comment