Finding the Latest Installed Version of a Patch

Reporting
1

(imported topic written by RobertKurt)

Hi,

For the bash patch (126546) on Solaris 10 machines, I’m trying to find which servers do (or don’t) have the most recent version of the patch applied. I’m currently using a specific value to determine if a machine is up to date. What I’d rather do, is check to see what the largest revision of 126546 has been applied, so I can easily check to see which machines don’t have 126546-07 applied. If I just change the below relevance to
does not contain
, and include that the name starts with 126546, I get all of the revisions of the 126546 patch that don’t equal 126546-07, instead of a list of machines that don’t have that version applied, and show the largest revision number that has been applied.

results from (bes fixlets whose (name of it contains “126546-07” and display name of site of it is “Patches for Solaris” and fixlet flag of it = true))

Thanks,

Robert

3

I think this might work:

(names of computers of it, names whose (it as string contains "123456") of actions of it) of results of bes actions

That should return the names of computers who have deployed actions that start with “123456”. I guess you could do the opposite too where you look for "it as string does not contain “123456” if you’re looking for all machines that don’t have the latest patch version installed.