Skip to main content
Question

PI117992 The Lock Device and Wipe Device commands may not appear in the Change Management logs.

  • November 12, 2025
  • 1 reply
  • 30 views
DMH2000
Forum|alt.badge.img+7

Does Jamf know when this will be resolved?  An important part of the logs are missing, and i haven’t heard any mention of a resolution.  Is there another way to find out who deletes machines or locks them?

Also would like to point out that Details for all actions are blank.

    1 reply

    h1431532403240
    Forum|alt.badge.img+6

    Hi @DMH2000,

    This is a known issue (PI117992) that Jamf is aware of. Unfortunately, PI numbers are internal Jamf tracking codes and aren't publicly searchable - they're typically referenced in support tickets and release notes when fixed.

    Regarding your questions:

    When will this be resolved? PI issues don't have public timelines. The best way to get updates is to open a support ticket with Jamf and reference PI117992. This adds your voice to the issue and you'll be notified when a fix is released.

    Alternative ways to track who locks/wipes devices:

    1. Device History - Check the individual device's Management History (Computer/Device > History > Management History). The "Completed Commands" section may still show these actions even if Change Management logs are blank.
    2. Jamf Pro API - If you have development resources, you can query the /JSSResource/computerhistory/id/{id} endpoint to retrieve command history.
    3. Jamf Log Stream (Jamf Cloud Premium) - If you have this add-on, the Change Management data is streamed to your SIEM and may contain more detail than the web UI shows.
    4. Database Query (On-Premise only) - Direct database queries can sometimes surface data not visible in the UI, though this requires careful handling.

    I'd recommend opening a support ticket to add weight to this PI and get notified when it's resolved.

    Terms & ConditionsCookie settingsAccessibility statement