Report to know If a critcal ms patch is a member of a baseline

Reporting
1

(imported topic written by eenglish)

Hi all,

We currently use multiple baselines to let our patches run as a policy. I was wondering if there is a report to show if a critical fixlet is a member of a baseline (if possible the name of the baseline). As it stands now…when I look at the fixlet view it will show no open actions beside each one…so it is hard to track which fixlets are currently running within a baseline action.

Any insight on this would be great.

Thanks a ton.

EE

2

(imported comment written by NoahSalzman)

What you are asking for is an outstanding feature request. As a bit of a workaround, this thread has tips on getting a list of all Fixlets and their corresponding baselines.

http://forum.bigfix.com/viewtopic.php?id=3280

3

(imported comment written by jessewk)

Here is a better query. You will want to tweak the filters. For testing purposes I created a baseline action with all the MS10-034 Fixlets, excluding corrupt patches. The query below will show all the MS10-03x patches that are not part of the baseline (so MS10-030 through MS10-039, exlcuding MS10-034):

names of elements of (set of bes fixlets whose (name of it starts with “MS10-03” AND not baseline flag of it AND name of it does not end with “CORRUPT PATCH”) - (set of source fixlets whose (name of it starts with “MS”) of components of component groups of source fixlets of bes actions whose (baseline flag of source fixlet of it AND state of it = “Open”)))

4

(imported comment written by eenglish)

Awesome thanks guys…that will help. Can I query it to start with MS and severity Critical?

Thanks again