Send MakeMeAnAdmin logs to Jamf

[rangiitsp]

We can't find a workaround to GarageBand, Logic Pro, MainStage and MuseHub requiring admin rights to install additional stuff (even running Carl Ashley's loopdown with the all parameter still results in Logic Pro wanting to download additional items although GarageBand shows everything installed).

So now we're considering deploying MakeMeAnAdmin and reducing the time down to 1min. All good except that the script stores the logs locally which we're concerned about the user deleting. One option is to email it out but that means leaving an unencrypted mail user password in the script which we could live with by creating a mail only account that can only send to internal addresses. But then I remembered seeing a script that sent logs to Jamf but can't remember where.

Does anyone know if it's possible to send the MMAA logs to Jamf (and how)? We just need to know what the user did during that window that they were an admin.

[McAwesome]

Apple provides a script to download the additional files for GarageBand and Logic Pro.  Reach out to your Apple SE and they can provide it.

[rangiitsp]

Thank you. We do have the script but it doesn't download everything (Logic Pro still has several instruments that need adding; GarageBand indicates fully downloaded though which is a good step in the right direction).

Anyway, that's only 1 sample use. We can foresee using this script for other things as well so it's important to find a way to send logs externally, such as allowing them to run this to allow MuseHub helper to run which then allows them to install additional items for MuseScore.

[ajpinton1]

You are wanting macOS event log collection, and SIEM log redirection. Neither of these are something Jamf Pro is designed to do, and it's not possible. However, Jamf Protect can do exactly what you are wanting.

jamfprotect/unified_log_filters/jamf_connect/privilege_elevation_elevate_and_demote.yaml at main · j...

[PaulHazelden]

GarageBand and Logic are a total pain to sort, but my way round the problem you are having is...
On a test machine install one of them, it will want to install its essential sounds set. Let it download but dont put in the admin permission to install it. Navigate to /private/var/folders, and set the folder view to calculate all sizes, and look for the biggest folder, it will be in the Gb numbers. Drill down to the biggest of the folders and you will find the installer packages for all of the Essential sounds. Make a copy of them in a folder. Let the app install these and then I normally reboot the Mac, to remove any possibility of the admin permission persisting. Repeat for the rest of the sound library, grab all of the installers and then sort how you want to install them, I use a script and send them in batches to the Mac, trying to keep each batch under 5Gb total size. Put each batch in a folder and then use a loop in a script to run through each installer in the folder and install it. Composer can sort most of this for you.
Then when your users open the App all of the loops are there ready to go.

Doesnt help you capture the logs, but could be a work around for not needing the logs.