Missing Patch Report - include last report time

Reporting
1

(imported topic written by KevinPatterson)

I’m using Explore Content with the a filter and field layout for the report. However, I need to add the field “Last Report Time” to show the last time/date the agent checked into the TEM server on the report. I’ve attached a file below with the filter and report layout.

Is there an easy way to add a field when using Explore Content when it’s not available on the pick list? Unfortunately, using Explore computers doesn’t give me the missing patch details using explore content does.

Thanks in advance.

2

(imported comment written by Lee Wei 2)

The Explore Data interface does not allow you to choose the Properties from the BES Computer object, so no, unfortunately we cannot select the Last Report Time property.

The only way would be to write a custom report.

Lee Wei

3

(imported comment written by KevinPatterson)

Is there an easy way to take what I’ve created during the explore content and port it over to a custom report?

4

(imported comment written by Lee Wei 2)

There is not a way to expose the Session Relevance in Explore Data so that you can use that as a starting point to write a custom report.

5

(imported comment written by Lee Wei 2)

Here is a bare bone example of the Session Relevance for you.

The idea of course is that once you start writing the Relevance (kind of like SQL), you can extract anything you need.

I have provided an example where you get the Computer object, and you can retrieve any properties from it. The example shows the “Device Type” property.

( source id of it,
source severity of it,
category of it,
name of it,
type of it,
display name of site of it,
(
name of it,
last report time of it,
concatenation "; " of values of results from (bes property whose (name of it = “Device Type”) ) of it
) of applicable computer of it
) of bes fixlets whose (
fixlet flag of it = true and
display name of site of it = “Patches for Windows (English)” and
applicable computer count of it > 0 and
category of it as lowercase contains “security” and
name of applicable computers of it as lowercase = “bf-w2k3srv02”)

You
go to Explore Data --> Custom and paste it in.

<?relevance ( html "" & html "" & it & html "
Source ID Source Severity Category Name Type Site Name Computer Name Last Report Time Device Type
") of concatenations of trs of ( td of source id of it & td of source severity of it & td of category of it & td of name of it & td of type of it & td of display name of site of it & ( td of name of it & td of (last report time of it as string) & td of concatenation "; " of values of results from (bes property whose (name of it = "Device Type") ) of it ) of applicable computer of it ) of bes fixlets whose ( fixlet flag of it = true and display name of site of it = "Patches for Windows (English)" and applicable computer count of it > 0 and category of it as lowercase contains "security" and name of applicable computers of it as lowercase = "bf-w2k3srv02") ?>

Lee Wei

6

(imported comment written by KevinPatterson)

Thanks Wei.

I made a minor update to the" <?relevance ( html" string - added a space after relevance to make it work.