Master operator approval email

Hi, is it any way to send email to master operators each time the operators take action on more than x servers?

TNX,
Julia

Short Answer … No. Not unless you write something to do it via the REST API.

Long Answer …
How do you define “take action on more than x servers”?

  • Are you talking about ONLY Actions that use direct targeting?
  • Or are you including Actions that use “Dynamic Targeting by property” that have more than “x” responding systems?
  • Are you talking about just Server OS’s responding? What about workstations and laptops?
1 Like

Hi,

Thank you for the answer.
Do you have some examples for this?

And I’m talking about any action…

Thanks,
Julia

Examples for what? REST API?

You need to provide more context for what you are looking for.

How would who gets notified be defined? How would the systems being targeted that you want alerts on be defined? Is the number of targeted systems to alert on the same for every user?

Hi,

  • I would like that when it happens , a mail will be sent to administrator
  • on any fixlet,baseline, that the target is more then 100 computers
  • yes any user

…and do you want that to happen before the action starts running? If you just want some kind of notification/log after it occurs, you might be able to set up a custom Web Report.

I don’t do much in web reports myself, but I think you could start with

names of bes actions whose (now - time issued of it < 1 * day AND size of reported computer set of it > 100)

Edit: Back at a console now, I fixed the Session Relevance query.

2 Likes

Hi,

thanks! that great relevance!

just one question, I have baseline that have many fixlets in it. and when I run this query it show me the baseline and all the fixlet,
is there a way to show only the main action that have been created?

thanks,
ortal

Hi,

Is there some answer? it’s very urgent.

Try the testing the multiple flag of property of the action
https://developer.bigfix.com/relevance/reference/bes-action.html

Hi,
thank you for the answer.
but this property will only let me know if there is a multiple fixlet or not. any idea what can I do with that?

thanks

This property indicates if the action is the parent action of the multiple action group (baseline action)
It works for actions not for fixlets.

for example this query only returns the parent action of the multiple action group

ids of bes actions whose (multiple flag of it)

This is what you want: top level flag of it

names of bes actions whose (top level flag of it AND now - time issued of it < 1 * day AND size of reported computer set of it > 100)

Reference: