Need to modify API for Accurate Superseded Patch Filtering

Content Authoring
1

We have developed an API that retrieves the remaining patch details across all operating systems, including hostname, OS information, and the list of applicable patches. Currently, we are excluding superseded patches using a basic string match condition:
name of it as lowercase does not contain "superseded".
While this approach provides a general filter, we now intend to enhance the accuracy of the results by using a superseded flag for more precise filtering.

i have tried few approaches, Unfortunately, all resulted in errors.

  1. and not (is superseded of it)
  2. and not (exists flag whose (it = "IsSuperseded") of it)
  3. Names of fixlets of bes site whose (name of it = "Patches for Window") whose ( fixlet flag of it AND applicable computer count of it > 0 AND not superseded flag of it )

Error: The operator "fixlet flag", "superseded flag", “flag” is not defined.

2

Looking at https://developer.bigfix.com/relevance/reference/bes-fixlet.html there doesn’t seem to be a superseded flag property for bes fixlets. You may be able to leverage the mime fields properties to identify superseded fixlets. E.g.

names of fixlets whose (fixlet flag of it AND applicable computer count of it > 0 and (exists mime field "x-fixlet-superseded" of it)) of bes sites whose (name of it = "Enterprise Security")

5 Likes
3

Thanks a lot, it actually worked :slight_smile:

1 Like