Script Exit Code - Forcing a policy log to show up as a "Problem"

This question came up recently in a Feature Request thread. While I don't know all the keywords the jamf binary will look for to determine a failure, I know "error" is one of them. These get read from stdout, which would include anything that gets echoed back in a shell script, as an example.

So the trick then is to use that exit status of your script, and if its not "0", do something like:

1echo "error: script failed"

As long as its being echoed out with a keyword the jamf binary will see, it should correctly identify it as an unsuccessful script run.

Edit: I just ran a couple of quick tests with a bogus script that simply echoed out a variable $4 assigned to the script. "failed" and "failure" also both get picked up by the policy as a problem. When I enter "passed" as the variable to echo, it shows as a successful run.
So so far, error, failed, and failure are 3 keywords you can use when checking exit status and reporting it back. I'm not sure what other keywords it might look for though, but those 3 should be enough.

Another option using logging....

Add variable to script:

1packagename="mypackage"

...and...

1#-------------------------------------------------------
2# Logging
3#-------------------------------------------------------
4logFile="/private/var/log/"$packagename".log"
5log () {
6echo $1
7echo $(date "+%Y-%m-%d %H:%M:%S: ") $1 >> $logFile
8}

Add log commands to capture the errors...then peruse /private/var/log/mypackage.log file for errors.

Don

or write to syslog
logger "my message"
tail -1 /var/log/system.log
Jul 24 15:32:17 HPES-nesstodd nesstodd[60009]: my message

mm2270's suggestion worked.

I liked the other two as well, something to keep handy for future use, but in this instance they wouldn't work since logging to a local file would then require going into each machine individually and reviewing the log or running an additional script to fetch the log and store it on a central server.

Thanks everyone!

Here is the script if anyone's interested.

1#!/bin/sh
2
3##############################################################
4# NAME
5#   fileCopy.sh -- Copy files and folders from CasperShare/Files to end user's hard drive.
6#
7# SCRIPT PARAMETERS
8#
9# $1 - mountPoint           $2 - Computer Name          $3 - Username   
10# -------           
11# $4 - Name of the file/directory to copy
12# $5 - Path that you're copying to
13#
14##############################################################
15#
16# VARIABLES & PARAMETERS
17#
18##############################################################
19
20sourceFile=$4
21destPath=$5
22sourcePath="/Volumes/CasperShare/Files"
23
24##############################################################
25# 
26# SCRIPT CONTENTS
27#
28##############################################################
29
30# Check to see if source file/folder exists
31if [ ! -f "$sourcePath/$sourceFile" ] && [ ! -d "$sourcePath/$sourceFile" ]; then
32    echo "Error: SOURCE does not exist!";
33    exit 1
34fi
35
36# Check if source folder is a file, else it's a directory
37if [ -f "$sourcePath/$sourceFile" ]; then
38    if [ ! -d "$destPath" ]; then
39        echo "Error: Destination path does not exist!";
40        exit 1
41    fi
42    # Check if file already exists to prevent over-writing.
43    if [ -f "$destPath/$sourceFile" ]; then
44        echo "Error: Destination path already contains FILE "$sourceFile"";
45        exit 1
46    fi
47    echo "Copying FILE "$sourceFile" to "$destPath"";
48    cp "$sourcePath/$sourceFile" "$destPath";
49    chmod 777 "$destPath/$sourceFile";
50else
51    if [ ! -d "$destPath" ]; then
52        echo "Error: Destination path does not exist!";
53        exit 1
54    fi
55    # Check if folder already exists to prevent over-writing.
56    if [ -d "$destPath/$sourceFile" ]; then
57        echo "Error: Destination path already contains DIRECTORY "$sourceFile"";
58        exit 1
59    fi
60    echo "Copying DIRECTORY "$sourceFile" to "$destPath"";
61    cp -R "$sourcePath/$sourceFile" "$destPath";
62    chmod -R 777 "$destPath/$sourceFile";
63fi 
64
65exit 0

I want my script, when it fails, to show as a fail in the Logs list AND to send JAMF Error message. I have my Email notifications set to notify me when: Error occurs when policy runs

I put in my script:

echo "error: script failed"
exit 1

The log shows it as a failure, but it doesn't send a JAMF Error Message. Any way to do that?

Hi ,

JAMF has mentioned in release notes that now policy logs takes the script exit value. I have a script to run after which has if else statement but if I use "exit 1" the policy log still shows as success. the policy should fail based on the exit 1 value in the else statement of the script.

Thanks & Regards,
Karthikeyan

exit 1 and echo "something something failure" do not currently make a policy fail on Jamf Pro 10

Jamf support told me to go to Jamf Nation to find out about how to get their product's policies to recognize Bash exit codes. Anyone able to figure out how to do this in Jamf 10?

I wonder if having the script kill itself would do it...

I suppose you could do a kill $$ or pipe to a die function or something, but that's designing around the problem I think. I could have sworn the JSS could tell at least whether a script within a policy was 0 or 1

-- (wrong account)

@krispayne, did you figure out how to make a policy exit early?

Thanks!