jamfprotect icon indicating copy to clipboard operation
jamfprotect copied to clipboard

YAML Syntax Requires escaped quotes within quotes

Open arcsector opened this issue 1 year ago • 0 comments

In most JAMF predicates there are double-quotes that are quoting a string within a string. For example, try the unified_log_filters/login_through_login_window_with_password_failure.yaml file:

predicate: "processImagePath BEGINSWITH "/System/" AND process == "SecurityAgent" AND subsystem == "com.apple.loginwindow" AND eventMessage CONTAINS "Authentication failure""

This closes and opens the YAML string at "/System/" and at the other double-quoted strings. In order to fix this, please use either of the two YAML Block Scalar indicators: https://yaml-multiline.info/ or please escape these bash-style "" or with a backslash \" - thank you!

arcsector avatar Apr 03 '24 19:04 arcsector