History/Audit Logs?

dmw3
Contributor III

Exactly what is supposed to show in these logs? Cannot find any information about them and none of the enrolled devices have anything in the Audit Logs.

Can an audit be manualy done? If so what of and how?

2 REPLIES 2

chriscollins
Valued Contributor

The product documentation explains these.

http://docs.jamf.com/9.99.0/casper-suite/administrator-guide/Viewing_the_History_for_a_Computer.html

http://docs.jamf.com/9.99.0/casper-suite/administrator-guide/Viewing_the_History_for_a_Mobile_Device...

Audit logs show when a FileVault recovery key was viewed for a computer or when a wipe command was sent to a computer.

On a mobile device it shows when a wipe command was sent, passcode clear event was sent, etc.

dmw3
Contributor III

@chriscollins As we don't use those features (yet), obviously no entries in the log files.

I did a search for "Audit Logs" and it did not return the url's that you have supplied.

Thanks for the info.