Create a Baseline from a list of KB's or MS Bulletin ID's

1

Hi Guys,

I have a list of 200 KB’s that have to be added to a Baseline for Windows7 machines for our DMZ environment.

Is there any other way to create the Baseline without having to add the individual fixlets one by one.

As always, your guidance is appreciated a lot.

Thanks

2

Hi

You can select the KB’s, right click and select add to existing baseline or create new one…

3

Hi Stein - Thanks for your reply. I am already aware of this method of creating baselines. I was trying to figure out if there was another way of making the process easier rather than having to find individual fixlet and adding it to the baseline.

4

Okay, there is another way:

Use the patch Wizard:

Pasted image288×529 13.4 KB

There you can chose which month and you can also filter on OS, Important, critical etc… We use that to create our baselines.

5

Hey Stein - Thanks for pointing this out, but I already tried this out. This method is also not big help. I came across a post that said that I will have to update and import API will all the KB info.

Any insight on this ?

Below is the post that I found

It’s possible to create a baseline from the Dashboard API. You’d probably want to engage our professional services team to help out, but you could potentially piece all the bits together from various posts on the forum. Basically I’d envision a work flow something like this:

  1. Launch a dashboard

  2. Input the list of MSXX-YY definitions

  3. Click ‘Show matching Fixlets’ button --> runs a relevance query and populates a list/data grid

  4. Select the fixlets you’d like to include from the list of matching fixlets

  5. Click ‘Import Baseline’ --> runs a relevance expression to select the fixlet objects and casts them to xml using the “as xml” cast. You take the XML objects, wrap them in baseline XML and pass the result to the ImportXML() function to create the baseline.

6

HI diwanker

I didn’t use that one yet… Maybe try it out and post your findings here? Could be useful for us too :wink:

I was at a the Security Conference in Rome last month and there I saw another tool that uses the REST API, but I can’t find the sources. This is developped by @jgo, so I hope he can help us out? :wink:

7

You’ll probably need to engage Professional Services if you want to build a custom dashboard to do that, but it is possible. I built a custom dashboard in my environment that will create Baselines containing all applicable fixlets for a given OS, that are not already contained by another baseline.

Unfortunately the code is very specific to my environment so I don’t think it would be helpful to post here (and there are a lot of related pieces that have to work together). But if you are feeling strong in HTML, JavaScript, and Session Relevance, you can look up the notes in the BigFix SDK and compare to some of the existing Dashboards. The Dashboard files have a .OJO extension, and are XML wrappers for HTML code including JavaScript. Most call external .JS JavaScript files or .SWF Flash to handle the logic.

In particular, check COMPONENTLIBRARY.JS which includes important functions like importXML(), which can take the XML data you’ve built and import into the console as a Baseline.

If you don’t have in-house developers or expertise to build a custom dashboard, I think this is the kind of thing that IBM Professional Services can do for you.