mirror of
https://github.com/MLBZ521/MacAdmin.git
synced 2026-03-12 12:43:19 +00:00
8275f566c2
+ Added new and improved existing queries; combined some existing queries that were similar + Updated formatting + Updated notes
314 lines
13 KiB
SQL
314 lines
13 KiB
SQL
-- Queries on Policy Configurations
|
|
-- Most of these should be working, but some may still be a work in progress.
|
|
-- These are formatted for readability, just fyi.
|
|
|
|
-- ##################################################
|
|
-- Basic Queries
|
|
|
|
-- Get Policies that Execute @ Ongoing
|
|
select policy_id
|
|
from policies
|
|
where
|
|
execution_frequency like "Ongoing";
|
|
|
|
|
|
-- Policies with no Scope
|
|
select distinct policies.policy_id, policies.name
|
|
from policies
|
|
where policies.policy_id not in (
|
|
select policy_id from policy_deployment
|
|
);
|
|
|
|
|
|
-- Policies that are Disabled
|
|
select distinct policies.policy_id, policies.name
|
|
from policies
|
|
where policies.enabled != "1";
|
|
|
|
|
|
-- Policies with no Category and not created by Jamf Remote
|
|
select distinct policies.policy_id, policies.name, policies.use_for_self_service
|
|
from policies
|
|
where
|
|
policies.category_id = "-1"
|
|
and policies.created_by = "jss";
|
|
|
|
|
|
-- Policies Scoped to All Users
|
|
select distinct policies.policy_id, policies.name
|
|
from policies
|
|
join policy_deployment
|
|
on policy_deployment.policy_id = policies.policy_id
|
|
join site_objects
|
|
on site_objects.object_id = policies.policy_id
|
|
join sites
|
|
on sites.site_id = site_objects.site_id
|
|
where
|
|
policy_deployment.target_type = "106";
|
|
|
|
|
|
-- For every Policy ID, get its Site Name
|
|
select policies.policy_id, if(sites.site_name is null, "none", sites.site_name) as Site
|
|
from policies
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id;
|
|
|
|
|
|
-- ##################################################
|
|
-- Self Service Policies
|
|
|
|
-- Get Policies are report if they are set for Self Service and if have a Description and Icon and include it's Site
|
|
select policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, if(policies.use_for_self_service = "1", "Yes", "No") as "Self Service", if(policies.self_service_description = "", "No", "Yes") as "Has Description", if(policies.self_service_icon_id = "-1", "No", "Yes") as "Has Icon",
|
|
from policies
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id;
|
|
|
|
|
|
-- Get Self Service Policies that install a Package (Also get each Package ID and Name)
|
|
select policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, policy_packages.package_id as "Package ID" , packages.package_name as "Package Name"
|
|
from policies
|
|
join policy_packages
|
|
on policy_packages.policy_id = policies.policy_id
|
|
join packages
|
|
on policy_packages.package_id = packages.package_id
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
where
|
|
policies.use_for_self_service = 1;
|
|
|
|
|
|
-- ##################################################
|
|
-- Policies ran over time period
|
|
|
|
-- Get Policies that ran within the last 24 hours, get and order by count
|
|
select policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, count(*)
|
|
from policies
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
join policy_history
|
|
on policy_history.policy_id = policies.policy_id
|
|
where
|
|
policy_history.completed_epoch>unix_timestamp(date_sub(now(), interval 1 day))*1000
|
|
group by policy_history.policy_id, sites.site_name
|
|
order by Count(*) desc;
|
|
|
|
|
|
-- Get Policies that submitted Inventory within the last 24 hours, get and order by count
|
|
select policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, count(*)
|
|
from policies
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
join policy_history
|
|
on policy_history.policy_id = policies.policy_id
|
|
where
|
|
policy_history.completed_epoch>unix_timestamp(date_sub(now(), interval 1 day))*1000
|
|
and policies.update_inventory = 1
|
|
group by policy_history.policy_id, sites.site_name
|
|
order by Count(*) desc;
|
|
|
|
|
|
-- Get Policies that have ran witin the last 24 hours, if they perform inventory, have errors, and their Site, and group/count the occurences
|
|
select policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, if(policies.update_inventory = "1", "Yes", "No") as "Update Inventory?", logs.error as "Errors", count(*)
|
|
from policies
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
join policy_history
|
|
on policy_history.policy_id = policies.policy_id
|
|
join logs
|
|
on logs.log_id = policy_history.log_id
|
|
where
|
|
policy_history.completed_epoch > unix_timestamp(date_sub(now(), INTERVAL 1 DAY))*1000
|
|
group by policies.policy_id, sites.site_name, logs.error
|
|
order by count(*) desc;
|
|
|
|
|
|
-- ##################################################
|
|
-- Mash up of other queries
|
|
|
|
-- Get various Policies details of interest, including if they perform inventory, have errors, and their Site, and group/count the occurences
|
|
select count(*), policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, if(policies.enabled = "1", "Yes", "No") as "Enabled", if(policies.update_inventory = "1", "Yes", "No") as "Update Inventory?", logs.error as "Errors", if(policies.use_for_self_service = "1", "Yes", "No") as "Self Service", if(policies.self_service_description = "", "No", "Yes") as "Has Description", if(policies.self_service_icon_id = "-1", "No", "Yes") as "Has Icon", if(policies.category_id = "-1" and policies.created_by = "jss", "No", "Yes") as "Has Category", if( policies.policy_id not in ( select policy_id from policy_deployment ), "False", "True") as "Has Scope"
|
|
from policies
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
join policy_history
|
|
on policy_history.policy_id = policies.policy_id
|
|
join logs
|
|
on logs.log_id = policy_history.log_id
|
|
group by policies.policy_id, sites.site_name, logs.error
|
|
order by count(*) desc
|
|
|
|
|
|
-- ##################################################
|
|
-- Policies that are configured for Ongoing with any "reoccuring" trigger and installs a Package
|
|
|
|
-- Get Policies that are configured for Ongoing with any "reoccuring" trigger and installs a Package (Also get each Package ID and Name)
|
|
select distinct policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, packages.package_id as "Package ID" , packages.package_name as "Package Name"
|
|
from policies
|
|
join policy_packages
|
|
on policy_packages.policy_id = policies.policy_id
|
|
join packages
|
|
on policy_packages.package_id = packages.package_id
|
|
join policy_deployment
|
|
on policy_deployment.policy_id = policies.policy_id
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
where
|
|
policies.execution_frequency = "Ongoing"
|
|
and (
|
|
policies.trigger_event_startup = "1"
|
|
or policies.trigger_event_login = "1"
|
|
or policies.trigger_event_logout = "1"
|
|
or policies.trigger_event_network_state_change = "1"
|
|
or policies.trigger_event_checkin = "1"
|
|
);
|
|
|
|
|
|
-- Get Policies that are configured for Ongoing with any "reoccuring" trigger and installs a Package which has a Scope that is not a Smart Group (Also get each Package ID and Name)
|
|
-- Need to add if scoped to Computer IDs directly
|
|
-- This query needs verification
|
|
select distinct policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, packages.package_id as "Package ID" , packages.package_name as "Package Name", computer_groups.computer_group_id as "Group ID", computer_groups.computer_group_name as "Group Name"
|
|
from policies
|
|
join policy_packages
|
|
on policy_packages.policy_id = policies.policy_id
|
|
join packages
|
|
on policy_packages.package_id = packages.package_id
|
|
join policy_deployment
|
|
on policy_deployment.policy_id = policies.policy_id
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
left join computer_groups
|
|
on computer_groups.computer_group_id = policy_deployment.target_id
|
|
left join smart_computer_group_criteria
|
|
on smart_computer_group_criteria.computer_group_id = computer_groups.computer_group_id
|
|
where
|
|
policies.execution_frequency = "Ongoing"
|
|
and (
|
|
policies.trigger_event_startup = "1"
|
|
or policies.trigger_event_login = "1"
|
|
or policies.trigger_event_logout = "1"
|
|
or policies.trigger_event_network_state_change = "1"
|
|
or policies.trigger_event_checkin = "1"
|
|
)
|
|
and (
|
|
policy_deployment.target_type = "101"
|
|
or policy_deployment.target_type = "7"
|
|
and policy_deployment.target_id in (
|
|
select computer_group_id
|
|
from computer_groups
|
|
where computer_groups.is_smart_group != 1
|
|
)
|
|
);
|
|
|
|
|
|
-- ##################################################
|
|
-- Enrollment Policies that install Packages
|
|
|
|
-- Enrollment Policies installing Packages that are Scoped to All Computers
|
|
select distinct policy_packages.policy_id, policies.name, policy_packages.package_id, packages.package_name, sites.site_name
|
|
from policies
|
|
join policy_packages on policy_packages.policy_id = policies.policy_id
|
|
join packages on policy_packages.package_id = packages.package_id
|
|
join policy_deployment on policy_deployment.policy_id = policies.policy_id
|
|
join site_objects on site_objects.object_id = policies.policy_id
|
|
join sites on sites.site_id = site_objects.site_id
|
|
where policies.trigger_event_enrollment_complete = "1"
|
|
and (
|
|
policies.policy_id = policy_deployment.policy_id
|
|
and policy_deployment.target_type = "101"
|
|
)
|
|
and (
|
|
policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
);
|
|
|
|
|
|
-- Get Policies that are configured for Enrollment and installs a Package which has a Scope Smart Group that is Not ADE Enrolled Machines
|
|
select distinct policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, computer_groups.computer_group_id as "Group ID", computer_groups.computer_group_name as "Group Name"
|
|
from policies
|
|
join policy_deployment
|
|
on policy_deployment.policy_id = policies.policy_id
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
join computer_groups
|
|
on computer_groups.computer_group_id = policy_deployment.target_id
|
|
join smart_computer_group_criteria
|
|
on smart_computer_group_criteria.computer_group_id = computer_groups.computer_group_id
|
|
where
|
|
policies.trigger_event_enrollment_complete = "1"
|
|
AND (
|
|
policy_deployment.target_type = "7"
|
|
AND policy_deployment.target_id IN (
|
|
SELECT computer_group_id
|
|
FROM computer_groups
|
|
WHERE computer_groups.is_smart_group = 1
|
|
)
|
|
AND policy_deployment.target_id IN
|
|
(
|
|
SELECT computer_group_id
|
|
FROM smart_computer_group_criteria
|
|
WHERE search_field != "Enrollment Method: PreStage enrollment"
|
|
)
|
|
);
|
|
|
|
|
|
-- Get Policies that are configured for Enrollment and installs a Package which has a Scope Smart Group that is ADE Enrolled Machines
|
|
select distinct policies.policy_id as "Policy ID", policies.name as "Policy Name", if(sites.site_name is null, "none", sites.site_name) as Site, computer_groups.computer_group_id as "Group ID", computer_groups.computer_group_name as "Group Name"
|
|
from policies
|
|
join policy_deployment
|
|
on policy_deployment.policy_id = policies.policy_id
|
|
left join site_objects
|
|
on policies.policy_id = site_objects.object_id
|
|
and site_objects.object_type = "3"
|
|
left join sites
|
|
on sites.site_id = site_objects.site_id
|
|
join computer_groups
|
|
on computer_groups.computer_group_id = policy_deployment.target_id
|
|
join smart_computer_group_criteria
|
|
on smart_computer_group_criteria.computer_group_id = computer_groups.computer_group_id
|
|
where
|
|
policies.trigger_event_enrollment_complete = "1"
|
|
AND (
|
|
policy_deployment.target_type = "7"
|
|
AND policy_deployment.target_id IN (
|
|
SELECT computer_group_id
|
|
FROM computer_groups
|
|
WHERE computer_groups.is_smart_group = 1
|
|
)
|
|
AND policy_deployment.target_id IN
|
|
(
|
|
SELECT computer_group_id
|
|
FROM smart_computer_group_criteria
|
|
WHERE search_field = "Enrollment Method: PreStage enrollment"
|
|
)
|
|
);
|