Is there a way to track the number of times a computer has rebooted?
Hello!
There is not a native way in bigfix that I am aware of.
What I would do is I would find an indicator that shows the computer has been rebooted, i’d probably start with something in the system event log if we are talking about Windows. Then write a piece of relevance that pulls all of the events related to a computer rebooting. Then i’d probably write relevance to count it.
@jgstew has a great analysis here http://bigfix.me/analysis/details/2994781 that shows the number of hard reboots. If you found what event ID corresponded to a normal reboot you could change the event ID in the relevance and then you’d have a property that counts the number of normal reboots!
1 Like
This will tell you how long ago since the computer was rebooted:
uptime of operating system
This doesn’t answer your question, but it is related.
@strawgate is correct, the answer to this question will be platform specific.
You could use the number of times the BigFix client has restarted within the past Xdays (where X is number of client log files) as a proxy for how often the computer itself has been rebooted, though this would not always be accurate, and it wouldn’t easily tell the difference between a reboot and a shutdown followed by a startup, though this option would be cross platform, which is probably the only interesting thing about it.
Here is how you get the client log files specifically: https://bigfix.me/relevance/details/3016429
Then this is the number of times the BigFix client has started in the past X days: https://bigfix.me/relevance/details/3016430
number of lines containing "Starting client version" of files whose(name of it as lowercase ends with ".log" AND 12 = length of name of it AND exists lines of it AND exists (name of it, (it as string) of (it; it+1; it-1) of (it as integer) of current year) whose(item 0 of it starts with item 1 of it)) of folders "Logs" of folders "__Global" of data folders of clients
This may actually be a good number to track to detect potential problems with the BigFix Client.
1 Like
Forgive my ignorance, but which part do you modify to show past 24 hours?