Suppress Script Output Option #146

New Issue

michael · 2026-01-19T18:29:23Z

michael commented

2026-01-19 18:29:23 +00:00

Originally created by @robertgendler on GitHub.

Originally assigned to: @brodjieski on GitHub.

Discussed in https://github.com/usnistgov/macos_security/discussions/300

^{Originally posted by btyl September 12, 2023}
An option to be able to suppress script output so that it is not captured in Jamf policy logs. We have a very large Mac population and the output from the script that gets captured in the policy logs is greatly increasing the size of the policy logs table in the database. Even better would be just to output any failed controls so those can be captured in the policy logs.

Originally created by @robertgendler on GitHub. Originally assigned to: @brodjieski on GitHub. ### Discussed in https://github.com/usnistgov/macos_security/discussions/300 <div type='discussions-op-text'> <sup>Originally posted by **btyl** September 12, 2023</sup> An option to be able to suppress script output so that it is not captured in Jamf policy logs. We have a very large Mac population and the output from the script that gets captured in the policy logs is greatly increasing the size of the policy logs table in the database. Even better would be just to output any failed controls so those can be captured in the policy logs.</div>

michael closed this issue

2026-01-19 18:29:23 +00:00

michael commented

2026-01-19 18:29:23 +00:00

@jmahlman commented on GitHub:

Works except that you will get a false positive with audit_flags_fm_failed_configure since you are just filtering for *"failed"* .

Looking at how to fix that...

@jmahlman commented on GitHub: Works except that you will get a false positive with `audit_flags_fm_failed_configure` since you are just filtering for `*"failed"* `. Looking at how to fix that...

michael commented

2026-01-19 18:29:23 +00:00

@jmahlman commented on GitHub:

Adding the :space: to the check worked for silent for me :)

@jmahlman commented on GitHub: Adding the :space: to the check worked for silent for me :)

michael commented

2026-01-19 18:29:23 +00:00

@jmahlman commented on GitHub:

FYI, this is working for us without issue.

@jmahlman commented on GitHub: FYI, this is working for us without issue.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: usnistgov/macos_security#146