Hi Team,
I want to create a relevance query to list only the BigFix computers/endpoints that have been added (registered) in the last 24 hours.
Current query:
relevance
(hostnames of it, names of it, ids of it) of bes computers whose (agent type of it = "Native")
But this gives me all the native agents. I want to restrict this to only those computers that have been added to the console in the past 24 hours.
- Is there a built-in property for “added/registration date”?
You can use below relevance for it:
now - subscribe time of current site < 24*hour
I recall there was an analysis that captured multiple BES items, and I believe the original relevance came from there. Unfortunately, I don’t remember the exact source at the moment, but I’ll share it if I find it.
In the meantime, you can use it to create the Retrieved Property # BES Client Installed in 24 Hours
I want to make it generic so that it works in every customer. Does bigfix provide something oob ?
Yes, this approach is quite generic and should serve the intended purpose.
As far as I know, BigFix does not provide anything like this out of the box by default.
1 Like