• All
  • Case Studies
  • ChromeOS Monitoring
  • Dashboard
  • Linux Client
  • Mac Client
  • News
  • Release Notes
  • Success Stories
  • Windows Client
All
  • All
  • Case Studies
  • ChromeOS Monitoring
  • Dashboard
  • Linux Client
  • Mac Client
  • News
  • Release Notes
  • Success Stories
  • Windows Client
Dashboard

Apple Business Manager Integration: AppleCare Dates, MDM Enrollment, and the Macs You Aren’t Monitoring

Today’s dashboard update connects Watchman Monitoring to Apple Business Manager and Apple School Manager. Once a connection is in place, the Macs you already monitor pick up their purchase history, AppleCare coverage, and MDM enrollment statedirectly from Apple. No agent update is required, and nothing is installed on the Macs. This is a dashboard feature that reads from Apple’s API on your behalf. One thing to be clear about up front, because it shapes everything else: this integration enriches Macs you already monitor rather than adding new ones. Devices are matched to your existing records by serial number, so a Mac needs the Watchman Monitoring agent to receive Apple’s data. That is a deliberate choice — the agent is the thing that knows whether a Mac is alive, and we did not want an hourly API sync quietly making a dead machine look like it checked in. AppleCare and warranty dates, from Apple Warranty coverage now comes from Apple’s own record: coverage type, start and end dates, agreement number, and payment type. These land on the Mac’s page and flow into the expiration notices you already receive, so an AppleCare plan expiring in sixty days reaches you the same way ...
Read More →
Mac Client

Mac Client 7.2.1.108 – CrashPlan, Munki, and macOS 10.13/14 fixes

Watchman Monitoring has released agent version 7.2.1.108 for macOS, with automatic rollout to all computers beginning Tuesday, August 11, 2026. Bug Fixes Plugins Failing on macOS 10.13 and 10.14 After the 7.2.1.105 rollout, Macs running High Sierra and Mojave stopped reporting correctly. The Time Machine Exclusions plugin generated a traceback, Backblaze reporting went missing, and logs filled with ERROR:root:code for hash blake2b was not found. This release ships a framework rebuilt to support macOS 10.13 and later, and those plugins report normally again. The Backblaze fix applies to Apple Silicon Macs too, which were affected by the same failure. CrashPlan: Grace for Backups That Are Still Running CrashPlan’s completion timestamp only advances when a run reaches 100%. On a machine with a few permanently locked files — an Outlook OST, Office temp files — that timestamp sits still while the backup runs every night, and the plugin raised an alert nobody could clear. When the completion timestamp is stale but backup activity is recent, the plugin now reports informationally instead of alerting. Machines that have genuinely stopped backing up still raise the error exactly as before.  Munki: “bool is used as a file descriptor” Warning The Munki plugin emitted a RuntimeWarning ...
Read More →
Dashboard

Watchman Monitoring Webhooks Update: New Events, Payloads & UI

Hey folks! We’re happy to announce that we’ve just released a huge update to the Webhooks feature in Watchman Monitoring. Here’s what’s changed: Setting up an endpoint New “All events” firehose option. When you create an endpoint, it now defaults to receiving all events instead of making you hand-pick each one. Two-mode event selector. You choose between All events or Specific events, with validation so you can’t save a broken configuration, plus warning callouts (for Beacon-related events) when relevant. Refreshed event descriptions and a new transition reference explaining how status changes map to events, so it’s clearer what each event actually means. What ends up in the payload Webhook payloads now include richer, more meaningful fields: severity, previous_severity, mute_type, is_muted, and is_hidden. Backward compatible — the old integer fields (status_code, previous_status, new_status) are still sent alongside the new ones, so existing integrations keep working without changes. Slack-formatted messages show both the legacy and the new fields. Delivery behavior Smarter alert/warning triggers. The “Plugin alert” event (now labeled “Plugin alert / warning”) fires on more of the transitions users actually expect: entering Warning from OK or Informational, and entering Alert from OK, Informational, or Warning — so escalating from a warning to a full alert now sends an alert webhook, which it previously didn’t. It still won’t fire on de-escalations or a plugin’s first report. The underlying plugin_alert event type is unchanged, so ...
Read More →
Mac Client

Mac Client 7.2.1.105: Bundled Python Upgraded to 3.13

We are excited to announce that Mac Client version 7.2.1.105 will be rolling out next Tuesday (August 4, 2026). In 7.2.1.105 we have updated the copy of Python that ships inside the Watchman Monitoring Mac agent, moving it from 3.9 to the newest stable release, 3.13. Why we did this The agent carries its own bundled copy of Python so it does not depend on whatever version of Python is, or is not, present on a given Mac. Over time, that bundled 3.9 build started turning up in vulnerability scans. If you run endpoint security or vulnerability tooling, you may have seen it flag the Python inside the agent for known CVEs. Those flags are based on the version number rather than on anything the agent actually does, but they still create noise and questions for your team. Moving to Python 3.13 clears those version-based flags. As part of this work we also audited every bundled dependency for known vulnerabilities, and the built framework reports none. What to expect The update is automatic. The first time a Mac runs the new agent, it downloads and installs the updated Python framework. This is a one-time download of about 37 MB per ...
Read More →
Dashboard

Dashboard – Smarter Duplicate Computer Detection

We’ve shipped a dashboard update that makes Duplicate Computers a lot less noisy for Windows and Linux agents. For a while, users have been reporting machines that showed up as duplicates even though they were clearly different devices: different serial numbers, different sites, sometimes even different hardware. In most of those cases the dashboard was matching on a MAC address that wasn’t actually unique to the machine. What was going wrong On Windows and Linux, Watchman Monitoring treats two computers as likely duplicates when they share a hostname in the same group, or when they report the same system MAC address. That works when the MAC really identifies the machine. It falls apart when several unrelated computers all report the same address from somewhere else on the network path, for example: A Cisco AnyConnect (or similar) VPN virtual adapter that reuses one MAC across many clients A cellular hotspot / tether whose default MAC gets picked up as the active NIC VMware, Hyper-V, VirtualBox, and other virtualization adapters that share well-known OUI prefixes Shared docks or dongles that briefly look like “the” system MAC Separately, archived computer records were still included when building the duplicate list. That meant a wiped-and-replaced machine could keep looking like a duplicate ...
Read More →
Linux Client

Linux Release 4.0.11 – Kerio Connect Monitoring

We released Linux Agent 4.0.11 today. This update brings Kerio Connect Server monitoring to the new Linux agent, and fixes a quiet but important problem with how expirations reported by Linux plugins were being saved.  Here’s what it does for Kerio Connect Server: Detects Kerio on its own by looking for the license file at `/opt/kerio/mailserver/`. On a host that isn’t running Kerio it reports informationally and stays out of your way, so there’s nothing to enable, deploy, or scope to a group. The plugin reads Kerio’s license file directly and reports the Base ID, license expiration, subscription expiration, licensed user count, and the registered company and contact email. Both dates are also reported as proper expirations — Connect (License) and Connect (Product) — so they land in your dashboard’s expirations list and give you the same advance renewal warning you already get for other tracked products.  Kerio can be configured to run a service that isn’t actually up. The plugin reads every service set to start automatically, along with the IP addresses and ports each one is configured to bind, then checks those against the ports genuinely in a listening state on the machine. If a configured service isn’t answering, you get ...
Read More →