Best way to create a computer property for counting MS criticals

Customizations
1

(imported topic written by rharmer91)

What is the best way to have a column in the computers tab which lists the number of critical Microsoft patches for that machine.

Thanks,

Rich

2

(imported comment written by jessewk)

If you want this as a column in the console, create a property with this definition:

number of relevant fixlets whose (value of header “x-fixlet-source-severity” of it as lowercase = “critical”) of sites

If you want a web report, try the custom one discussed in this post:

http://forum.bigfix.com/viewtopic.php?id=212

3

(imported comment written by rharmer91)

Thanks!

I assume this is for all criticals, not just Microsoft. I’ll see if I can change the site to just include MS.

Rich

4

(imported comment written by khanand91)

hey Jesse

will this work with only globally visible fixlets, i’ve tried using globally visible flag = true … but i guess that would have been too easy …

thanks

5

(imported comment written by jessewk)

Hi khanand, the property I provided is evaluated on the client side and the client has no concept as to which fixlets are hidden from an operator. If you need this information evaluated on the server side where visibility is considered, you’ll need to make a custom report and view it in web reports. Unfortunately, that won’t get you a column in the console.

6

(imported comment written by khanand91)

oh damm … thats a shame, i knew it was too good to be true …

thanks for the quick reply

7

(imported comment written by khanand91)

jesse … i’m trying to filter this further using the source release date … but when i enter the date it does not seem to make any difference …

if name of operating system = “Win2003” OR name of operating system = “Win2000” then (number of relevant fixlets whose (value of header “Subject” of it as lowercase starts with “ms0” AND value of header “Subject” of it as lowercase does not contain “corrupt” AND value of header “x-fixlet-source-release-date” of it > “01/01/2008” AND value of header “x-fixlet-source-severity” of it as lowercase = “critical”) of sites whose (name of it = “Enterprise Security”)) else nothings

I have also tried using various date formats …

8

(imported comment written by BenKus)

You might try:

… value of header “x-fixlet-source-release-date” of it as date > “01 Jan 2008” as date …

Ben