Has anyone found a way to report on policy actions that have run more than one time on a computer? We are looking for a way to shwo which policies are be reapplied and which action in the policy specifically is being reapplied by computer.
Here is a query that can help (the data isn’t available in the session relevance so it can’t be queried in Web Reports)…
select Q.ResultsText as ‘ComputerName’ , A.ActionID, AD.Name as ‘Action Name’, AD.CreationTime as ‘Action Creation Time’, A.StartTime, A.EndTime, A.TryCount, A.RetryCount
from ACTIONRESULTS A, QUESTIONRESULTS Q, LOCAL_OBJECT_DEFS L, ACTION_DEFS AD where
A.ComputerID=Q.ComputerID AND
L.Name=‘Computer Name’ AND L.ID = Q.AnalysisID AND AD.ID = A.ActionID AND AD.ID =
Hmm, ok, this will work for now. Any chance we can add this to the always expanding feature request list?
In our view, it it vital to see which clients are running the same baseline over and over again. And then to be able to drill down and see which fixlets / tasks from that baseline are being reapplied. Either the client has an issue or the user is attempting to do something they should not be doing
Ok… I forgot that we actually had the retry count in the session inspectors…
Here is the session relevance that is equivalent to the sql query above:
(names of computer of it, id of action of it, name of action of it, time issued of action of it, status of it, apply count of it) of results whose (apply count of it > 5) of bes actions whose (now - time issued of it < 100 * day AND name of it contains “” AND id of it > 0)
(Note that everything in the “whose” clause is optional and I added simply to illustrate the filtering)
The only downside is that you can’t get “action taken time” in session relevance…