Best way to get check-in history

[cshepp11]

Hello,

I am looking for a way to see the check-in history of a particular machine to the JSS. We are seeing machines failing to report to Casper for months at a time and then return. We speculate that some users are creating another partition on their machine to work from. I would like to see check-in history for the last...3/6/9 months.

Thanks,
Chris

[chris_kemp]

pull a copy of /var/log/jamf.log from the suspected machine(s), it should log everything since it was imaged. Note that it doesn't log the year in the date stamp, so you'll have to use your own judgement as to when that happens.

You could also script a check of the available disk partitions, so if they have another partition you would be able to see that.

[cshepp11]

Hello chris.kemp,

Thanks for the input. Let me take a look at obtaining the local logs.