AUE_SHUTDOWN

Documentación de implementación sin conexión de Jamf Protect

Solution
Application
Content Type
Documentación técnica
Utilities & Services
ft:locale
es-ES
System Shutdown (Apagado del sistema)
El registro de apagado del sistema se genera cuando un proceso ha iniciado un apagado del sistema, por ejemplo a través de los comandos shutdown o reboot.
Log Level (Nivel de registro)
1
Requiere ajuste detallado.
No

Ejemplo de AUE_SHUTDOWN

Este es un ejemplo de registro de telemetría para eventos de apagado del sistema.

{
  "header": {
    "time_seconds_epoch": 1657788514,
    "time_milliseconds_offset": 903,
    "version": 11,
    "event_modifier": 0,
    "event_id": 6168,
    "event_name": "AUE_shutdown"
  },
  "host_info": {
    "serial_number": "C03WG0H4HDTS",
    "host_name": "Test_MacBook_Pro",
    "osversion": "Version 12.4 (Build 21F79)",
    "host_uuid": "8891C1E2-0AC0-4E4A-844B-EA491B14D115"
  },
  "identity": {
    "signer_id": "com.apple.shutdown",
    "team_id_truncated": false,
    "signer_id_truncated": false,
    "cd_hash": "4d2174158d4e9b5e44824f61d2d335b35d2a6097",
    "team_id": "",
    "signer_type": 1
  },
  "key": "12524D1E-9719-4A44-B16E-9332697B4ABA",
  "return": {
    "error": 0,
    "description": "success",
    "return_value": 25
  },
  "subject": {
    "responsible_process_id": 3211,
    "process_name": "/sbin/shutdown",
    "terminal_id": {
      "type": 4,
      "ip_address": "0.0.0.0",
      "port": 0
    },
    "effective_group_id": 0,
    "user_id": 0,
    "process_id": 3212,
    "effective_group_name": "wheel",
    "effective_user_name": "root",
    "user_name": "root",
    "group_id": 0,
    "group_name": "wheel",
    "audit_id": 4294967295,
    "audit_user_name": "",
    "process_hash": "ee2173168b7cc360ea4166ef2754be72ff24e15c",
    "effective_user_id": 0,
    "session_id": 100091,
    "responsible_process_name": "/System/Library/CoreServices/sessionlogoutd"
  }
}