Jamf extension attribute for checking for and removing any failed macOS MDM commands

EA_Clear_Failed_MDM_Commands.sh

#!/bin/bash

jssurl="https://yourjss.com"
apiuser="yourapiuser"
apipass="yourapiuserpass"
serial=$(/usr/sbin/ioreg -rd1 -c IOPlatformExpertDevice | /usr/bin/awk -F'"' '/IOPlatformSerialNumber/{print $4}')

####### FUNCTIONS

clearfailedmdmcommands () {
	/usr/bin/curl -sfku "$apiuser":"$apipass" "$jssurl":8443/JSSResource/commandflush/computers/id/"$computerID"/status/Failed -X DELETE
}

getjsscomputerid () {
	computerID=$(/usr/bin/curl -u "$apiuser":"$apipass" "$jssurl":8443/JSSResource/computers/serialnumber/"$serial" -H "accept: text/xml" | /usr/bin/xpath "/computer[1]/general/id/text()")
}

getfailedmdmcommands () {
	xmlresult=$(/usr/bin/curl -sfku "$apiuser":"$apipass" "$jssurl":8443/JSSResource/computerhistory/serialnumber/"$serial"/subset/Commands -X GET -H "accept: application/xml" | /usr/bin/xpath "/computer_history/commands/failed")
}

####### SCRIPT

getfailedmdmcommands

# An empty failed XML node will look like this: <failed />
parseresult=$(/bin/echo "$xmlresult" | /usr/bin/grep "<failed />")
exitcode=$(/bin/echo $?)

# Clear failed MDM commands if they exist
if [ "$exitcode" != 0 ]; then
	
	getjsscomputerid
	
	/bin/echo "Removing failed MDM commands ..."
	
	clearfailedmdmcommands
	
	result="Removed Failed MDM Commands"
else
	/bin/echo "No failed MDM commands exist."
	
	result="No Failed MDM Commands Exist"
fi

/bin/echo "<result>$result</result>"

exit