I want to check as recently my bigfix console keep reporting on new date of first time report. It’s supposed to be first time report on 21/04/2021 however it changed to 6/11/2023 when there’s no re-installation is happening.
What is the relevance behind the “First Report Time” property? The Bigfix agent does have a create date and that does get reset if the agent detects a conflict with computer ID or if a manual client rest has been triggered (Fixlet 1976).
If your property is using the client create date then you may want to see of logs from the date are still available to see if the client did reset.
Several things could cause a client to reset, which would remove & resubscribe all sites, and likely resetting whatever you’ve defined as “First Report Time”.
Rolling a VM snapshot to an earlier point in time; deleting the BESData directory; deleting some of the registry values; revoking the certificate from the Console.
This sounds legit. Recently i deleted my BESData directory as the superseded patches still showing while when patch deployed, it’s resulting not relevant. However, is this normal?
(month of it as two digits & “/” & day_of_month of it as two digits & “/” & year of it as string)
of date (local time zone) of (minimum of subscribe times of sites)
Let’s get HCL to supply this AND have it formatted as date/time so we can do date boolean logic against it. Today, it’s just a string and that is useless.