fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
2.99k stars 415 forks source link

Activity log for 'enrollment' date into Fleet for hosts migrated via the proxy #20569

Open zayhanlon opened 2 months ago

zayhanlon commented 2 months ago

Problem

As an administrator investigating either a problem with a device migration or wanting to confirm device migration via an exportable log, I cannot see migrations occurring via the MDM proxy because they do not have an 'enrollment' event, and thus do not appear on the activity feed.

What have you tried?

Potential solutions

Zach: Looking for the date that a device was migrated from the previous MDM into Fleet via a log or record. Since there isn't actually an enrollment that takes place for migrations via the proxy, maybe it could be the timestamp of the first time the device did a check-in to the Fleet MDM?

What is the expected workflow as a result of your proposal?

Activity feed and or host details activity log would show the date the device was first migrated into Fleet.

JoStableford commented 2 months ago

Related to a Slack conversation