Update baselines via rest api

[cstoneba]

Is there a way to add new components to a baseline components group via the REST API, or is the only way to rebuild the baseline from scratch each time?

[strawgate]

Normally you’d download (get) the baseline you want to modify via the REST API and then just add components and post the new baseline against the REST API.

[cstoneba]

that would work. But then you lose the action history for that baseline because you’re replacing it with a new one with a new fixletID.

[strawgate]

The reference (https://bigfix.me/restapi) seems to indicate that post will indeed create a new fixlet even if you provide an existing fixlet ID.

However it seems to indicate that put will indeed update the fixlet/baseline without creating a new one.

Give that a shot

[cstoneba]

Yeah, that sounds like it should work. The next challenge I see how to retrieve the fixlet information required like “IncludeInRelevance”, “ActionName”, etc.

<BaselineComponent Name="2718704: Unauthorized Digital Certificates Could Allow Spoofing - Windows Server 2008 SP2" IncludeInRelevance="true" SourceSiteURL="http://sync.bigfix.com/cgi-bin/bfgather/bessecurity" SourceID="271870413" ActionName="Action1">

[jgstew]

I already have relevance that will turn a fixlet or task into a baseline component. It is apart of the items I have already published to BigFix.Me that automatically generate baselines.

See here:

• https://bigfix.me/relevance/details/3002440 (raw data)
• https://bigfix.me/fixlet/details/6116 (these actually use the above to create the xml)
• https://bigfix.me/fixlet/details/6132

The general idea is you get a set of fixlet/task objects you would like to be baseline components, then the relevance to turn that into the XML representation from there never changes.

---

See this:

Automatic Baseline Creation and eventually AutoPatching

I have created a task/fixlet that uses the REST API to automatically generate a baseline. My next step is to create a second action that will automatically create the baseline, and then automatically deploy it to test machines to achieve "AutoPatching". See here: http://bigfix.me/fixlet/details/6132 The core of this is basically a session relevance query that returns the set of fixlet objects you wish to deploy which feeds into more session relevance that takes a set of fixlet objects and t…