03-28-2024 10:19 AM - edited 03-28-2024 10:38 AM
Hello Jamf Nation!
The Unified Logging feature has been added to Jamf Protect Offline Deployment Mode. Unified Logging allows you to use the same predicate-based filter criteria used with the Mac log command to collect relevant log entries from computers and send them to a security information and event management (SIEM) solution or to a third-party storage solution.
For additional information, see Creating a Unified Log Filter in the Jamf Learning Hub. For Unified Log examples, see the Jamf Protect open source GitHub repository.
Thank you,
The Jamf Protect team