Hello,
Can BigFix Inventory (or BigFix Compliance) provide installed software info down to fixpack level? For example, if IBM MQ V8.0 is installed with fixpack 8.0.0.4, it can report MQ 8.0.0.4 instead of just showing V8.0. Another example is WebSphere Application Server V8.5.5 with fixpack 8, then it can show 8.5.5.8 instead of showing V8.5.
Please kindly help and advise.
Thanks & Regards,
Kelvin
What operating system is the system with this software installed?
It is possible that inventory already has this info, or perhaps one of the analyses provided by IBM in the BigFix console.
If not, you should be able to read this info from a file / registry / etc if you can find the location where this can be found for this software in particular.
Bigfix inventory uses software catalogs to identify software installations. Catalogs are nothing but list of software signatures.
The base catalog comes with signatures to identify most of the softwares and IBM releases a catalog update every month.
But we can create our own signatures. So you would still have to create a signature for MQ 8.0.0.4 or WAS8.5.5.8. Once it is created, it will start identifying systems having that software.
So in short, BFI can provide software info down to fixpack level.
Hi,
The OS includes Windows and Unix (AIX, Linux, Solaris), and we want the fixpack level information mainly for installed IBM Middleware, for example, DB2, MQ, WAS, IIB, IBM Java SDK, CMOD, DataStage, Rational tools, Tivoli Monitoring, TSM, etc.
I am not sure if there is common location or method to store IBM middleware fixpack level information, but as far as I know, different commands / scripts are needed to show product version info, e.g. for MQ using dspmqver command, for WAS using versionInfo.sh/.bat, for IBM Java SDK using ‘java -version’, for DB2 LUW using db2level command, etc.
So, it would be good and convenient if the BigFix tool can provide such IBM middleware fixpack level info without any manual analysis scripts / command. There is a use case scenario that customer receives IBM Alert on WAS vulnerability issue and it requires to install some hotfix based on a certain fixpack level of the product. If BigFix could provide the installed software fixpack level info, customer could easily and quickly identify the affected hosts/systems from BigFix reports and then apply the related hotfix to those systems ASAP.
So, will be glad to know if there is same requirement from other BigFix customers.
Is the fixpack info found in the SWID tags that IBM uses?
That would be one way to get this info, if so.
Ideally you can find the info you need within a file that relevance can read directly without the need to run a command first to read back the result.
If IBM doesn’t already have this info in the software catalog signatures, then they could potentially add it, otherwise you’d have to make the signatures yourself.