Patch Remediation

(imported topic written by khanand91)

Hi folks,

I’m working on pulling some stats re patching status for an audit report, I’ve been working on some custom reports to pull specific data. I have all but one piece of data I think. Basically I’m looking for the number of patches that where applied between a time period and some other criteria. Pretty much what I have below for relevant execpt with a count of the patches remediated per OS:-

Q: (it, multiplicity of it) of unique values of values of results (bes property whose (name of it = “OS” and reserved flag of it = true), computers of results whose (relevant flag of it = true) of (bes fixlets whose (name of it starts with “MS” and source severity of it as lowercase = “critical” and name of it as lowercase does not contain “corrupt” and name of it as lowercase does not contain “superseded” and fixlet flag of it = true and (source release date of it as string as date >= (first tuesday of (month_and_year of current date) - 10*week) as string as date and source release date of it as string as date < (first tuesday of (month_and_year of current date)) as string as date ))))

A: Win2008 6.0.6001, 7

I know I need to use the nonrelevant flag but cant seem to get the count or multiplicity of it …

Thanks

(imported comment written by Lee Wei)

Give this a try to see if it is what you want.

(it, multiplicity of it) of unique values of operating systems of computers of results from (bes computers) whose (exists first became relevant of it and relevant flag of it = 

false) of ( bes fixlets whose ( name of it starts with 
"MS" and source severity of it as lowercase = 
"critical" and name of it as lowercase does not contain 
"corrupt patch" and name of it as lowercase does not contain 
"superseded" and fixlet flag of it = 

true and (source release date of it as string as date >= (first tuesday of (month_and_year of current date) - 10*week) as string as date and source release date of it as string as date < (first tuesday of (month_and_year of current date)) as string as date ) ) )
1 Like

(imported comment written by khanand91)

thats great! looks like its returning the correct results - need to do a bit more checking first though.

looking at it I do need some other data, I’lll also need the count of machines per OS that where remediated and Relevant against the fixlets with the same criteria as before - I’m being a bit lazy by asking for it without doing some ground work first :slight_smile:

thanks Lee

(imported comment written by Lee Wei)

You can check out this report and reusing it:

http://forum.bigfix.com/viewtopic.php?id=5477

(imported comment written by khanand91)

Hey Lee,

That’s a neat report!

I have two issues with it though:-

a) 9/10 the report times out on our production WR server

b) Although the raw data is useful for verifying the results, all I really need for now is a count of computers either fixed or relevant where the fixlet has the filters applied in the previous post.

I wonder if providing b) would workaround a) by not returning as much data?

I looked at the code in the report and see that you’re doing the loop & calc in jscript - I take it then its not feasible in bf alone?

Most of tha data I need I have a few ways of getting, either through a RP or using SQL - the main piece that I’m stuck on is the ‘fixed’ results:–

I have a SQL query that gets me the results but alas we cannot run SQL queries against the db without a whole lot of grief, the excel connector is also timing out on the fixlet results :frowning:

do you any other sugestion?

Thanks!

(imported comment written by Lee Wei)

Andreas,

What is the message/error that you are getting when you time out?

Web Reports does not time out, so that is happening externally.

You are correct that the report takes a long time in Relevance, hence I am doing it in JavaScript on the client/browser side.

Firefox has the fastest JavaScript engine, you want to make sure to use that, and to turn off any JavaScript timeout. This is documented in a help button on the report.

Lee Wei

(imported comment written by khanand91)

Hey Lee,

I never see an error using web reports as I generally wait a maximum of half an hour, the excel connector times out as well - with time out set to 166 minutes ( 10000 seconds ) - we where told at one point that the WR server was suffering due to extra data from ‘useless action results’ prior to moving to 7.2.5.22 on the all the clients, not sure whether thats still having an effect.

I’ll try to use firefox from now on when connecting to WR using HTTP, thanks for the tip!

I have a SQL statement that will pull back the data, just waiting to see if it can be added as a view so i can use it - I think thats the best solution as all the raw data can be used to build reports with some basic SQL.

Thanks