Show Policy Actions that have run multple times on a client

Reporting
1

(imported topic written by SystemAdmin)

Has anyone found a way to report on policy actions that have run more than one time on a computer? We are looking for a way to shwo which policies are be reapplied and which action in the policy specifically is being reapplied by computer.

John

2

(imported comment written by BenKus)

Here is a query that can help (the data isn’t available in the session relevance so it can’t be queried in Web Reports)…

select Q.ResultsText as ‘ComputerName’ , A.ActionID, AD.Name as ‘Action Name’, AD.CreationTime as ‘Action Creation Time’, A.StartTime, A.EndTime, A.TryCount, A.RetryCount
from ACTIONRESULTS A, QUESTIONRESULTS Q, LOCAL_OBJECT_DEFS L, ACTION_DEFS AD where
A.ComputerID=Q.ComputerID AND
L.Name=‘Computer Name’ AND
L.ID = Q.AnalysisID AND
AD.ID = A.ActionID AND
AD.ID =

order by A.StartTime

Ben

3

(imported comment written by SystemAdmin)

Hmm, ok, this will work for now. Any chance we can add this to the always expanding feature request list?

In our view, it it vital to see which clients are running the same baseline over and over again. And then to be able to drill down and see which fixlets / tasks from that baseline are being reapplied. Either the client has an issue or the user is attempting to do something they should not be doing :slight_smile:

4

(imported comment written by BenKus)

Ok… I forgot that we actually had the retry count in the session inspectors…

Here is the session relevance that is equivalent to the sql query above:

(names of computer of it, id of action of it, name of action of it, time issued of action of it, status of it, apply count of it) of results whose (apply count of it > 5) of bes actions whose (now - time issued of it < 100 * day AND name of it contains “” AND id of it > 0)

(Note that everything in the “whose” clause is optional and I added simply to illustrate the filtering)

The only downside is that you can’t get “action taken time” in session relevance…

You can use the BigFix Excel Connector (http://support.bigfix.com/labs/excelconnect.html) to execute this query or you can make a custom report.

Ben

5

(imported comment written by SystemAdmin)

Very nice. Thanks once again. I will be trying this out this week. Now if there was a way to generate an alert :slight_smile:

6

(imported comment written by jessewk)

You can create a custom web report using Ben’s relevance and have Web Reports send you an email anytime the report changes. Schzam!

7

(imported comment written by MattBoyd)

Great relevance! Thanks Ben!