-
Notifications
You must be signed in to change notification settings - Fork 31
Open
Description
In most JAMF predicates there are double-quotes that are quoting a string within a string. For example, try the unified_log_filters/login_through_login_window_with_password_failure.yaml file:
predicate: "processImagePath BEGINSWITH "/System/" AND process == "SecurityAgent" AND subsystem == "com.apple.loginwindow" AND eventMessage CONTAINS "Authentication failure""
This closes and opens the YAML string at "/System/"
and at the other double-quoted strings. In order to fix this, please use either of the two YAML Block Scalar indicators: https://yaml-multiline.info/ or please escape these bash-style ""
or with a backslash \"
- thank you!
Metadata
Metadata
Assignees
Labels
No labels