Web Report notification of action taken

I was thinking of creating a task in BigFix to start an applications service if it see’s that it is stopped. My question is, if BigFix does respond and turns the service on, could we get notified that it did that and what computer it did it on?

1 Like

You could use a policy action with relevance like:

(state of it !=“Running”) of services whose (display name of it as lowercase = “bes client”)

The action script would start the service:

waithidden cmd.exe /c net start [service name]

Then you could set up a scheduled report based on triggered relevance or use the email notification task as the last component of baseline.

https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Config/sa_commonnotificationusage.html

(Obviously you cannot use this on the bes client service, it’s just an example)

You would think this would be a little simpler. You have to do a lot of stuff to even get the email notification setup…

If its a policy action, you’d only have to do this once (as long as the baseline remains in an open state)

If you go down the webreports path, you could use this session relevance for your custom report:

(item 0 of it as string & ", " & item 1 of it as string & ", " & (if ((year of date (local time zone) of it) as integer = 1980) then ("<none>") else ((year of it as string & "/" & month of it as two digits & "/" & day_of_month of it as two digits) of date (local time zone) of it & " " & (two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it)) of (item 2 of it as time) & ", " & item 3 of it as string & ", " & item 4 of it as string) of ((if (exists ID of Action of it | false) then (concatenations "%0A" of (ID of Action of it as string)) else ("<none>")) , (if (exists Name of Action of it | false) then (concatenations "%0A" of (Name of Action of it as string)) else ("<none>")) , (if (exists Time Issued of Action of it) then (Time Issued of Action of it as string) else ("Fri, 15 Feb 1980 00:00:00 -0000")) , (if (exists Name of Computer of it | false) then (concatenations "%0A" of (Name of Computer of it as string)) else ("<none>")) , (if (exists Status of it | false) then (concatenations "%0A" of (Status of it as string)) else ("<none>"))) of results whose (((ID of Action of it = 16107))) of bes actions

You will need to change the ACTION ID on the last line. Then in webreports set up a scheduled report using this option:

image

Where in Web Reports would I put this session relevance?

1 Like

Pls.see this for creating custom reports:

https://www.youtube.com/watch?v=-KurTtUQxls

1 Like