Endpoint Services, Munki, How do I access reporting in Munki?

Introduction to Munki's reporting capabilities via MunkiReport.

Systems

Munki Mac Endpoint Management

Affected Customers

University of Illinois IT Pros leveraging Technology Services Endpoint Service Munki Mac Endpoint Management

General Information

MunkiReport is a reporting service for endpoints managed with Munki. It provides a quick overview of your mac fleet through various dashboards and reports. It can also provide data for use in various inventory and security compliance reports.

Note that MunkiReport collects data from Munki clients, not directly from the Munki server itself. Data flows from Munki ----->> Munki clients ----->> MunkiReport. For this reason, if a Mac client has been offline, its record in MunkiReport won't reflect changes made on the Munki server in the interim, such as manifest changes.

Actions

Logging In

Default Report Data

Login with your AD credentials and you'll see the Dashboard summarizing: 

  • how many clients (endpoints) are active and inactive
  • recent events (such as warnings and installs) as well as the time of warning relative to the time the Dashboard was last reloaded
  • current status indicators including SMART (for locally-connected storage volumes), FileVault & Time Machine usage, and warranty information where available
  • how many of each type of managed endpoint hardware are in the managed set of endpoints, which OS versions are managed on those endpoints, which versions of Munki are in-use, and which endpoints are bound to a directory (Active Directory, in this case)
  • pending actions on endpoints (such as pending installs and uninstalls)

MunkiReport Dashboard

Each section of the report is in a rectangle with a label ("SMART status", "Time Machine") and a small icon to the right of the label. Select that icon for a paginated listed of information about the relevant endpoints summarized in that section. Selecting the icon next to "Free Disk Space", for example, shows a list of endpoints where you can get more detail including: 

  • see a table listing per-endpoint free disk space and sort that table by any column header
  • change the query (in the upper-right corner) and produce different results in realtime as you type
  • export the table in Microsoft Excel or CSV format
  • copy the table to the clipboard for use elsewhere
  • print the table

Select a particular endpoint's name to get still more information about that endpoint, control that endpoint remotely (subject to authentication), or see other details about that endpoint (such as installed fonts, details about the attached displays, and which applications are used most frequently).

Changing the MunkiReport User Interface

Across the top of the MunkiReport UI you'll find a shortcut to get back to the Dashboard, a menu listing all of the available reports, a menu with each endpoint listing (detail about each endpoint), a funnel icon for specifying which set of endpoints you want to work with, a wrench icon to set the user interface theme, a world icon to set the user interface language, and your NetID which is a menu where you can find the link to log out.

Locating Client Data in MunkiReport

The table below shows where different kinds of reporting data are found in MunkiReport.

Client Data locations
Reporting Data Location(s) in MunkiReport (may be multiple) Notes
Antivirus status Listings - CrowdStrike While MunkiReport has MalwareBytes and Sophos reporting capabilities, they have not been tested by EPS. There is currently no MunkiReport support for Dell Data Protect; unit IT Pros would have to get that information from the individual service's console.
Backup status Listings - CrashPlan
Listings - Time Machine
Currently only available for Time Machine (the native macOS backup client) and CrashPlan backups.
Computer Name Listings - Clients
Critical updates
Security updates
Listings - Managed Installs (search for desired update)
Listings - Client Report (search or sort by build version)
Search for current versions of Apple security updates, or look for build version resulting from a particular update.
Definition updates Listings - Managed Installs (search for desired update) Search for current versions of Apple's Gatekeeper, Malware Removal Tool, or XProtect releases.
Encryption status Dashboard - FileVault 2 Status
Listings - Security
Endpoint age Dashboard - Hardware Age
Listings - Hardware (for detailed model info, including model year
Listings - Warranty Report (for approximate year of manufacture)
Endpoint age - average by unit Dashboard - Hardware Age (filter by Machine Group) Requires manual calculation of average endpoint age.
Endpoint warranty status (in or out of warranty) Listings - Warranty Report (contingent on Apple GSX account) This is not currently available. An Apple GSX account is required to perform warranty lookups.
Endpoints - number by unit Dashboard - Client Activity (filter by Machine Group)
Firewall status Listings - Firewall
Listings - Security
Reports - Security Reports
Hardware failure / not healthy Dashboard - SMART Status
Listings - Storage [SMART Status]

___________________

Reports - Power Report [Battery health]
Listings - Batteries [Battery health]
IP address (DHCP or Static) Listings - Network (select client to view dhcp vs. static) Only viewable for single client, not in bulk.
Last logged-in user Listings - Clients Will only show the user who was logged in the last time the client checked in with the Munki server. If Munki last ran at the login window, this field will be empty.
Last login Listings - User Sessions (filter on 'login'; select client to view timestamp). Only viewable for single client, not in bulk.
Location Reports - Location Report
Listings - Location
This is not currently available. EPS must first evaluate the Location module to rule out any potential privacy issues. This is due to the fact that with this feature, unit IT Pros would be able to see the last known location or vicinity for the endpoints in their MunkiReport business unit. If approved, units would also need to install the Pinpoint package on their clients.
MAC Address Listings - Network
Operating system Listings - Clients
Listings - Supported OS
Reports - Client Report
Operating system not patched Dashboard - OS Breakdown Shows minor point releases.
Operating system unsupported Dashboard - OS Breakdown While this doesn't identify which OSs are out of support, it provides a clear overview, including minor point releases.
Owner/primary user Listings - Clients
Listings - User Sessions
Listings - Client will only show the user who was logged in the last time the client checked in with the Munki server. If Munki ran at the login window, this field will be empty.
Listings - User Sessions will provide login history over time to help identify the primary user.
RDP status Listings - Security Shows ssh and ARD groups and users
Software installed list Select client; Show - Munki Only viewable for single client, but not in bulk.
Time since last restart Listings - User Sessions (filter on 'reboot'; select lient to view timestamp.)
Unit Use filters to select Machine Group(s)

Archiving MunkiReport Client Records

MunkiReport offers the option to archive computer records, which may be a useful method for organizing your Mac fleet into active vs. inactive pools. Archived Macs are still including in monthly billing reports, so archiving should not be used in lieu of deleting records when offboarding devices.

To archive a MunkiReport record:

  • In MunkiReport, go to Listings - Clients to view the Client Report.
  • Enter the computer name or serial number in the top-right search field to locate the computer record.
  • Select the computer name to open the device summary.
  • Click the 'Archive' button in the top right corner, which will change to 'Unarchive'. Clicking the button again will toggle the machine status back to active.
  • When an archived Mac checks back in to MunkiReport, it will automatically be unarchived and its status returned to active.

To include and exclude archived Macs from your MunkiReport data view, select the filter (funnel) icon in the top MunkiReport menu bar.

Deleting Clients

Deleting device records from MunkiReport is an important part of device offboarding when a Mac is retired from service and slated to be transferred to Surplus.


Contact the EPS team



Keywordsreport inventory versions pending installs uninstalls munkireport EPS MTM "multi tenant" multi-tenant mac macos endpoint TechS-EPS-MTM   Doc ID72432
OwnerEPS Distribution ListGroupUniversity of Illinois Technology Services
Created2017-04-07 15:53:47Updated2023-12-01 13:03:46
SitesUniversity of Illinois Technology Services
Feedback  0   0