Source of Computer Vulnerability Status

Reporting
1

(imported topic written by SystemAdmin)

When I open the main page of Web Reports (v7.1.1.315), the pie chart for Computer Vulnerability Status shows a large percentage of our devices as “Critical”.

If I go into the Console and show all fixlets with a severity of Critical, the number of applicable computers requiring Critical updates does not reflect the percentage indicated in Web Reports.

How does Web Reports derive this pie chart, and why does it appear to differ from the information available in the Console?

Thanks.

2

(imported comment written by SystemAdmin)

Does this pie chart also include fixlets that have been globally hidden?

3

(imported comment written by BenKus)

I don’t think it is supposed to… but it will include locally hidden Fixlets… And I will need to check to see if it includes Tasks too.

Ben

4

(imported comment written by SystemAdmin)

Well, I don’t have any tasks that have a “critical” severity. Pie chart still does not appear to match the console.

5

(imported comment written by BenKus)

Hmmm… try going to your web reports QNA like:

http://:52312/webreports?page=QNA

Evaluate the session relevance:

number of unique values of names of computers of results of bes fixlets whose (source severity of it as lowercase = “critical”)

What does that return? It should match the number you see in the overview graph…

Ben

6

(imported comment written by SystemAdmin)

Values differ by roughly 100.

7

(imported comment written by BenKus)

Interesting… try this:

number of unique values of names of computers of results of bes fixlets whose (source severity of it as lowercase = “critical” AND globally visible flag of it = true)

Also, can you try clearing your cache in the web reports and see if that chnages anything…

Ben

8

(imported comment written by SystemAdmin)

That result also differs by roughly 100.

Do you mean refreshing the cache? If so, no change.

9

(imported comment written by BenKus)

Try this and check the results again:

http://support.bigfix.com/cgi-bin/kbdirect.pl?id=360

Ben

10

(imported comment written by SystemAdmin)

Not to hijack this thread, but what is :

"Hmmm… try going to your web reports QNA like:

http://:52312/webreports?page=QNA"

It doesn’t work here. Is it some option we need to install / enable?

11

(imported comment written by BenKus)

You might try port 80 (depending on how you installed web reports):

http:///webreports?page=QNA

Ben

12

(imported comment written by SystemAdmin)

What is the impact of deleting the cache?

13

(imported comment written by SystemAdmin)

Followed the process in the KB article. Removed the DAT file and started the service. After about 10 minutes I have data on my report page, unchanged from before. Oddly, I don’t have a new DAT file on my server. I expected one to be there.

14

(imported comment written by BenKus)

Hey Mike,

The cache is there to help performance and you can delete it freely… It writes out periodically… Once a day I think…

Ben

15

(imported comment written by SystemAdmin)

FYI - The QNA result and the number on the dashboard are still off by 100+. And again, looking at relevant fixlets, sorting by critical, and just doing a tally… it doesn’t add up.

16

(imported comment written by SystemAdmin)

I slightly modified your QNA query and ran it to see the names of the “critical” fixlets.

unique values of names of bes fixlets whose (source severity of it as lowercase = “critical” AND globally visible flag of it = true)

I’m guessing that “globally visible flag of it = true” should exclude anything that I have hidden globally, but that isn’t true. This query lists many fixlets that I’ve hidden, like older superseded stuff.

17

(imported comment written by BenKus)

Hi Mike,

Did you locally hide them or did you globally hide those Fixlets?

Ben

18

(imported comment written by SystemAdmin)

I looked again, and I think what I’m seeing are visible fixlets that just have an applicability of zero. So I would not see them in the “All Relevant Fixlets” view, but they exist in the “All Fixlets” view and have not been globally hidden.

It still doesn’t explain the difference in the numbers and the notion that the report data does not appear to match what I see in the console.

19

(imported comment written by BenKus)

Hi Mike,

I am sure there is an explanation for the discrepancy, but I don’t know what it is based on this info… perhaps you can contact support and they can look at it with you to try to figure it out? http://support.bigfix.com/contact.html

Ben