Pulling logs from remote computers to save locally

This may be backwards from the usual flow of data from Endpoint - we’re looking to pull logs from remote computers and save them locally - with a unique file name (probably computer name + regular file name). Is this possible to do? I know I could do an analysis with "lines from file “”, but I think they are looking for something in a fixlet action script to save the file directly to the Bigfix server. Thanks for your assistance!

You can use Upload and Archive Manager!

Just make a fixlet with:

setting "_BESClient_ArchiveManager_MaxArchiveSize"="2097152" on "{parameter "action issue date" of action}" for client 
setting "_BESClient_ArchiveManager_OperatingMode"="2" on "{parameter "action issue date" of action}" for client 
setting "_BESClient_ArchiveManager_FileSet-MyLogs"="C:\PathTo\Logs\*.*" on "{parameter "action issue date" of action}" for client
archive now

This will upload any files in the C:\PathTo\Logs directory to the uploadmanagerdata folder on your bigfix server.

UploadManagerData\(Last 2 digits of computer ID)\(Computer ID)

More info about Upload Manager here: http://www.ibm.com/support/knowledgecenter/SS63NW_9.5.0/com.ibm.bigfix.doc/Platform/Config/c_overview.html

4 Likes

I did some testing with your fixlet code and it worked like a charm. Lots of times the manuals will have definitions of what something is, but does not show any practical application examples of how to implement them. Thanks for the quick reply.

Ken

2 Likes