I am trying to work on a relevance that I can use in REST API. The data that I am trying to collect is at least the computername and the fixlet name but I need to add some conditions related to the computers’ properties.
I am able to get the name and the fixlet name with this:
(unique values of names of applicable computers of it, name of it) of bes fixlets whose (fixlet flag of it AND display name of site of it starts with “Patches” AND source severity of it as lowercase = “critical” AND name of it starts with “MS24-SEP”)
but I need to add in some conditions to filter via operating system and a custom property similar in webreports:
To filter a list with relevance, we use the whose-it form, where the whose-it refers to the property/attribute to the left of the whose term:
In the case you shared above, you’re already filtering on the Fixlet content with the whose after the bes fixlet object (i.e. we have filters that specify for instance that the source severity should equal “critical” and start with “MS24-SEP”). If you you want to add computer filters (as per your screenshot), then you’d need a whose-it after the computers object (in your case after applicable computers). Here’s an example:
(unique values of names of applicable computers whose (operating system of it starts with "Win2" AND last report time of it > (now - 15 * day) AND (value of result from (bes property "My Custom Property") of it contains "THU")) of it, name of it) of bes fixlets whose (fixlet flag of it AND display name of site of it starts with "Patches" AND source severity of it as lowercase = "critical" AND name of it starts with "MS24-SEP")
You can add more computer filters in here and with different kinds of logic (and naturally, you have to adjust the property names accordingly).
Thank you very much for providing more information about the session relevance. Was able to test it out and will be able to add more filtering conditions from here.
Hello Aram, might need your guidance on this. We were able to utilize the session relevance in getting the names of the servers and the relevant fixlets and able to act accordingly to remediate them.
Now, we’re working on some informative reports that will check on which group will the servers from the results are belonging to.
I am trying to figure out how to incorporate this piece of session relevance below that has the group name of the server
value of results from (bes property “Service Name”) of it) of computer of it
I tried inserting it to the original relevance in this thread like:
(unique values of names, (value of results from (bes property “Group Name”)) of applicable computers whose (operating system of it starts with “Win2” AND last report time of it > (now - 30 * day) AND (value of result from (bes property “Patch Window”) of it contains “THU”)) of it, name of it) of bes fixlets whose (fixlet flag of it AND display name of site of it starts with “Patches” AND source severity of it as lowercase = “critical” AND name of it starts with “MS25-FEB”)
((unique values of names of applicable computers whose (operating system of it starts with “Win2” AND last report time of it > (now - 15 * day) AND (value of result from (bes property “Patch Window”) of it contains “THU”)) of it, (value of results from (bes property “Group Name”) of it) of computers of it) of it, name of it) of bes fixlets whose (fixlet flag of it AND display name of site of it starts with “Patches” AND source severity of it as lowercase = “critical” AND name of it starts with “MS25-FEB”)
But not getting any luck. I do understand with the help of the Presentation debugger tool that “of it, name of it) of bes fixlets” will already refer to the fixlet and I need to squeeze the expression for getting the value of the group name custom property to this side of the full expression
(unique values of names of applicable computers whose (operating system of it starts with “Win2” AND last report time of it > (now - 15 * day) AND (value of result from (bes property “Patch Window”) of it contains “THU”))
I haven’t tested this, but perhaps you can try something like the following:
((name of it, value of result (bes property "64-bit CPU", it)) of applicable computers whose (operating system of it starts with "Win2" AND last report time of it > (now - 15 * day) AND (value of result from (bes property "My Custom Property") of it contains "THU")) of it, name of it) of bes fixlets whose (fixlet flag of it AND display name of site of it starts with "Patches" AND source severity of it as lowercase = "critical" AND name of it starts with "MS24-SEP")
Thank you very much for the response. Grouping the inspector for the custom property with the computer name and pointing it to the applicable fixlets with the “it” helped out and was able to get the output we are aiming for
