Data and Tables Affected by Log Flushing

This article outlines the types of logs and respective data that can be flushed, as well as the database tables that are affected.

Log TypeFlushed DataTable Affected
Application Usage logsAmount of time each application was in the foreground on a computer

application_usage_logs

Computer Usage logs
  • Startup dates/times

  • Login and logout dates/times

  • Usernames used to log in and out of the computer

usage_logs

Policy logs
  • Date/time that the policy ran on the computer

  • Status of the policy

  • Actions logged for the policy

Note:

Policy Log Flushing will not cause any policies to run again. The Jamf Pro server will completely remove the policy entries past the point of log flushing with the exception of the last recorded action.

  • logs (logs.type="policy")

  • log_actions

  • policy_history

Jamf Remote logs
  • Date/time that the Jamf Remote event took place

  • Status of the Jamf Remote event

  • Actions logged for the Jamf Remote event

  • logs (logs.type="remote")

  • log_actions

Screen sharing logs
  • Date/time that the screen sharing session took place

  • Status of the screen sharing session

  • Details of the screen sharing session

  • logs (logs.type="vnc")
  • log_actions

Jamf Imaging logs
  • Date/time that the computer was imaged

  • Status of the imaging event

  • Actions that took place during the imaging event

  • logs (logs.type="autorun")

  • log_actions

Computer and mobile device management history

Completed (Acknowledged) MDM commands

Note:

Jamf Pro does not automatically flush Failed or Pending MDM commands. Pending and Failed MDM commands can be cleared using Mass Action or Re-Enrollment Settings.

mobile_device_management_commands

Computer inventory reports

Computer inventory information from past inventory submission

Note:

The last inventory report is always kept. For example, if an application was installed three weeks ago, but log flushing for computer inventory reports was set to flush data older than two weeks, Jamf Pro will still have a record of that application's installation on the computer.

  • applications

  • extension_attribute_values

  • fonts

  • hard_drive_partitions

  • hard_drives

  • hardware_reports

  • ibooks_installed

  • operating_systems

  • plugins

  • reports

Mobile device inventory reports

Mobile device inventory information from past inventory submissions

Note:

The last inventory report is always kept. For example, if an app was installed three weeks ago, but log flushing for mobile device inventory reports was set to flush data older than two weeks, Jamf Pro will still have a record of that app's installation on the mobile device.

  • mobile_device_details

  • mobile_device_extension_attribute_values

  • mobile_device_installed_applications

  • mobile_device_installed_certificates

  • mobile_device_installed_profiles

  • mobile_device_installed_provisioning_profiles

  • reports

Jamf Pro access logs
  • Successful/failed logins

  • IP address from the login

  • How the device accessed Jamf Pro

jss_access_logs

Change Management logs (added in 9.31)
  • Date/time the change took place

  • Username of the administrator who made the change

  • Object type

  • Object name

  • Action

  • Details about the change

object_history
Event logs (added in 9.64)
  • Date/time the status was last updated for an event

  • Name of the device that is in the scope of an event

  • Object type

  • Object name associated with an event

  • Action of the event

  • Status of the event

Note:

The last event entry for any combination of object and device type will always be kept. For example, if a computer installed and then removed a configuration profile two months ago with no additional entries for that computer and profile since then, flushing event logs older than one week will remove the installation event but keep the removal event.

event_logs

User and Location History (added in 10.26.0)

User and location history information for each computer or mobile device

Note:

The last user and location history entry is always kept for each computer or mobile device.

  • locations

  • location_history

User Reports (added in 10.26.0)

User information

Note:

The last user report is always kept.

  • user_object_extension_attribute_values

  • reports

Additional Information

For more information about log flushing, see Flushing Logs in the Jamf Pro Administrator's Guide.