Session Relevance Patch Compliance Report - not capturing actions from baselines in custom sites

I could use some help in looking at this relevance statement. The reporting works fine. However it does not capture actions that are created from baselines from Custom sites. I don’t see anything obvious. This currently does work. I don’t see why baselines from custom sites make any difference as this seems to focus on actions and computers.

<?relevance concatenations of trs of (td of html ("" & (if (exists name of computer of it) then (name of computer of it) else ("Name Missing")) & "") & td of (if (exists id of action of it) then (id of action of it as string) else ("ID Missing")) & td of html ("" & (if (exists name of action of it) then (name of action of it) else ("Action Name Missing")) & "") & td of (if (exists state of action of it) then (state of action of it) else ("Action State Missing")) & (if (exists status of it) then (if (status of it = bes action status fixed) then (td of (html "" & status of it as string & html "")) else (if (status of it = bes action status failed or status of it = bes action status error) then (td of (html "" & status of it as string & html "")) else (td of (status of it as string)))) else (td of "Action Status Missing")) & td of (if (exists time issued of action of it) then (((year of it as string & "-" & month of it as two digits & "-" & day_of_month of it as two digits) of date (local time zone) of it & " " & (two digit hour of it as string & ":" & two digit minute of it as string & ":" & two digit second of it as string) of time (local time zone) of it) of time issued of action of it) else ("Issued Time Missing")) & td of (if (exists start date of action of it and exists start time_of_day of action of it) then (((year of it as string & "-" & month of it as two digits & "-" & day_of_month of it as two digits) of date (local time zone) of it & " " & (two digit hour of it as string & ":" & two digit minute of it as string & ":" & two digit second of it as string) of time (local time zone) of it) of ((start date of it as string & " " & start time_of_day of it as string) as local time) of action of it) else (if (exists time issued of action of it) then ((((year of it as string & "-" & month of it as two digits & "-" & day_of_month of it as two digits) of date (local time zone) of it & " " & (two digit hour of it as string & ":" & two digit minute of it as string & ":" & two digit second of it as string) of time (local time zone) of it) of time issued of action of it)) else ("No Start Date"))) & td of (if (exists end date of action of it and exists end time_of_day of action of it) then (((year of it as string & "-" & month of it as two digits & "-" & day_of_month of it as two digits) of date (local time zone) of it & " " & (two digit hour of it as string & ":" & two digit minute of it as string & ":" & two digit second of it as string) of time (local time zone) of it) of ((end date of it as string & " " & end time_of_day of it as string) as local time) of action of it) else ("No End Date")) & td of (if (exists issuer of action of it and exists name of issuer of action of it) then (name of issuer of action of it) else ("Issued By Missing"))) of results of bes actions whose (exists end date of it and name of source fixlet of it starts with "MS" and now > ((end date of it as string & " " & end time_of_day of it as string & " " & local time zone as string) as time) and now - ((end date of it as string & " " & end time_of_day of it as string & " " & local time zone as string) as time) < 7*day) ?>
</table>

Try to start with the simplest case you can…in Web Reports, open the QNA debug page by changing the end of the url to the hidden ?page=QNA and try this query, see whether it includes your baseline actions

Q: IDs of bes actions whose (exists end date of it and name of source fixlet of it starts with "MS" and now > ((end date of it as string & " " & end time_of_day of it as string & " " & local time zone as string) as time) and now - ((end date of it as string & " " & end time_of_day of it as string & " " & local time zone as string) as time) < 7*day)

I suspect it should include the subjections of your baseline, but not the top-level baseline itself. The filter for name of source fixlet of it starts with "MS" would exclude the baseline - unless your baseline names also start with “MS”

If that doesn’t work, take off the date/time filters…I’m not sure whether sub-actions include the dates properties, or if that is limited to the top level action.

I am not certain that i am doing this right or what to expect when i do it

are you saying add the hidden ?page=QNA like shown below

https://my bigfix server:8083/webreports hidden ?page=QNA

Sorry, was away from my computer a bit. Here’s a sample for the link on one of my test machines
https://bes-root.domain.home:8083/webreports?page=QNA

After checking my own, I think the query should only include the top-level Baseline Action if the Baseline name starts with “MS”, but should include the sub-actions that come from a source fixlet with a name starting with “MS”

None of the baselines include MS in name. I will try the login

I was able to run the query and did not find action fixlet from a custom baseline action for the sub component fixlet that does start with MS. i added 60 days vs. 7 days even though the action ran on 3/18

Thanks Jason as i never new the QNA was available.

Jason,

i changed “MS” to Custom Baseline Name “LLUH” in the following statement (exists end date of it and name of source fixlet of it starts with “MS” and now > . That showed all the computers that ran against the custom baselines but it does not show any sub actions of those baselines. So it seems its a two part statement , the name of the baseline and the sub actions which would me “MS”