michael/MacAdmin
1
0
Fork 0
mirror of https://github.com/MLBZ521/MacAdmin.git synced 2026-02-03 14:03:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Added new query to track recurring App Store App Installs

Browse Source 
This query isn't limited to the past twenty-hours as well and isn't limited to a "completed" date
This commit is contained in:
Zack T
2023-05-08 17:40:57 -07:00
parent 99a6746172
commit 25065305f9
1 changed files with 99 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

99
Jamf Pro/Reporting/Database Maintenance and SQL Queries/Queries-MDM Command Reports.sql
View File

@@ -244,6 +244,7 @@ DESC;
-- ##################################################
-- Looping App installs on devices
-- Count and details on "_*completed*_" InstallApplication MDM Commands within last 24 hours when count is greater than one
-- Devices looping InstallApplication command (PI-004429)
SELECT
@@ -338,6 +339,104 @@ ORDER BY COUNT(*)
DESC;
-- Count and details on InstallApplication MDM Commands when count is greater than one, reardless of status
-- App Store Apps that Jamf Pro keeps trying to install on devices
SELECT
COUNT(*),
mdm_c.client_type AS "Client Type",
CASE
WHEN (
mdm_c.client_type in ("COMPUTER", "COMPUTER_USER")
AND sites_macs.site_name IS NOT NULL
) THEN sites_macs.site_name
WHEN (
mdm_c.client_type in ("MOBILE_DEVICE", "MOBILE_DEVICE_USER", "TV")
AND sites_mobiles.site_name IS NOT NULL
) THEN sites_mobiles.site_name
ELSE "None"
END AS `Device Site`,
CASE
WHEN mdm_c.client_type in ("COMPUTER", "COMPUTER_USER") THEN mac_denorm.computer_id
WHEN mdm_c.client_type in ("MOBILE_DEVICE", "MOBILE_DEVICE_USER", "TV") THEN mobile_denorm.mobile_device_id
END AS "Device ID",
CASE
WHEN (
mdm_c.client_type in ("COMPUTER", "COMPUTER_USER")
AND sites_mac_apps.site_name IS NOT NULL
) THEN sites_mac_apps.site_name
WHEN (
mdm_c.client_type in ("MOBILE_DEVICE", "MOBILE_DEVICE_USER", "TV")
AND sites_mobile_apps.site_name IS NOT NULL
) THEN sites_mobile_apps.site_name
ELSE "None"
END AS `App Site`,
mdm_cmds.profile_id AS "App ID",
CASE
WHEN (
mdm_c.client_type in ("COMPUTER", "COMPUTER_USER") AND
mdm_cmds.command REGEXP "^(Install|Remove)Application$"
) THEN mac_apps.app_name
WHEN (
mdm_c.client_type in ("MOBILE_DEVICE", "MOBILE_DEVICE_USER", "TV") AND
mdm_cmds.command REGEXP "^(Install|Remove)Application$"
) THEN mobile_apps.app_name
END AS "Name",
mdm_cmds.apns_result_status AS "Result",
mdm_cmds.error_localized_description AS "Description"
FROM mobile_device_management_commands AS mdm_cmds
LEFT OUTER JOIN computers_denormalized AS mac_denorm
ON mdm_cmds.client_management_id = mac_denorm.management_id
LEFT OUTER JOIN computer_user_pushtokens AS cupt
ON mdm_cmds.client_management_id = cupt.management_id
LEFT OUTER JOIN mobile_devices_denormalized AS mobile_denorm
ON mdm_cmds.client_management_id = mobile_denorm.management_id
LEFT OUTER JOIN mdm_client AS mdm_c
ON mdm_cmds.client_management_id = mdm_c.management_id
LEFT OUTER JOIN mobile_device_apps AS mobile_apps
ON mdm_cmds.profile_id = mobile_apps.mobile_device_app_id
LEFT OUTER JOIN mac_apps
ON mdm_cmds.profile_id = mac_apps.mac_app_id
LEFT JOIN site_objects as site_objs_mac_apps
ON mac_apps.mac_app_id = site_objs_mac_apps.object_id
AND site_objs_mac_apps.object_type = "350"
LEFT JOIN site_objects as site_objs_mobile_apps
ON mobile_apps.mobile_device_app_id = site_objs_mobile_apps.object_id
AND site_objs_mobile_apps.object_type = "23"
LEFT JOIN sites as sites_mac_apps
ON sites_mac_apps.site_id = site_objs_mac_apps.site_id
LEFT JOIN sites as sites_mobile_apps
ON sites_mobile_apps.site_id = site_objs_mobile_apps.site_id
LEFT JOIN site_objects as site_objs_macs
ON mac_denorm.computer_id = site_objs_macs.object_id
AND site_objs_macs.object_type = "1"
LEFT JOIN sites as sites_macs
ON sites_macs.site_id = site_objs_macs.site_id
LEFT JOIN site_objects as site_objs_mobiles
ON mobile_denorm.mobile_device_id = site_objs_mobiles.object_id
AND site_objs_mobiles.object_type = "21"
LEFT JOIN sites as sites_mobiles
ON sites_mobiles.site_id = site_objs_mobiles.site_id
WHERE
mdm_cmds.command = "InstallApplication"
AND (
mdm_c.client_type in ("COMPUTER", "COMPUTER_USER") AND mac_denorm.is_managed = 1
OR
mdm_c.client_type in ("MOBILE_DEVICE", "MOBILE_DEVICE_USER", "TV") AND mobile_denorm.is_managed
)
GROUP BY
mdm_c.client_type,
mdm_cmds.profile_id,
mobile_denorm.mobile_device_id,
mac_denorm.computer_id,
mdm_cmds.apns_result_status,
mdm_cmds.error_localized_description,
`App Site`,
`Device Site`
HAVING COUNT(*) > 1
ORDER BY COUNT(*)
DESC;
-- ##################################################
-- Check if a Config Profile is being pushed to a device multiple times within thirty days