Topic
  • 34 replies
  • Latest Post - ‏2014-09-01T13:06:23Z by mail4vijay
SystemAdmin
SystemAdmin
890 Posts

Pinned topic Report Available: MS Patch Status Report

‏2007-04-18T22:05:23Z |
MS Patch Status Report

http://software.bigfix.com/download/bes/customreports/msPatchesScreenshot1.JPG
Description: This report gathers the depolyment status of Microsoft Patches, creates a table summerizing patch deployment details (source release date, computers patched, etc.) and makes a graph displaying the 10 most recent patching totals.

Archiveable/Mailable: Yes
Required BES Sites: Enterprise Security

*Updated 4/20/07 - changed wording for more clarity
Updated on 2010-08-16T19:42:16Z at 2010-08-16T19:42:16Z by Lee Wei
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2007-04-20T18:09:02Z  
    I like this report, but after going through the code I didn't see how you specified "workstation". I would like to edit this so I can also do "server" What line did I miss?

    Please keep these type of things coing out.
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2007-04-20T19:55:42Z  
    Sorry, "Enterprise Workstation Patch Status" is a terrible title. It actually makes no differentation between servers and workstations. The report was originally based on a custom report for a specific customer and used their terminology. I will update it shortly.
  • rdamours91
    rdamours91
    20 Posts

    Re: Report Available: MS Patch Status Report

    ‏2007-04-21T20:27:39Z  
    This report was exactly what I was looking for...

    If there was a pulldown to filter by location or groups, in my case "school name by ip", it would be absolutely perfect.

    We would like to generate reports for individual sites and give them a status of what they have paid for.

    It's a great overview though of our whole implementation...
  • BenKus
    BenKus
    597 Posts

    Re: Report Available: MS Patch Status Report

    ‏2007-04-21T22:39:01Z  
    Hey rdamours,

    You can filter this page per school if you would like. Simply go to the filter creation mechanism on left side of of the web report page (towards the top) where you create a filter per school (based on a "school" or "location" retrieved property) and the results will be broken down for each school. You can then save the report for each school.

    Ben
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2007-04-23T19:02:03Z  
    Is the "patched computers" number actually the number of non-relevant computers or is it the number of computers that have actually applied the patches through BigFix?
    Updated on 2007-04-23T19:02:03Z at 2007-04-23T19:02:03Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2007-04-23T20:28:27Z  
    Hey jnharry,

    "Patched computers" is specifically the number of computers who became relevant, then became nonrelevant, for a specific MS patch. This is effectively the number of computers patched, however a computer could be patched through some means other than bigfix, say by hand, and it would still appear in the "patched computers" column.

    -Zak
    Updated on 2007-04-23T20:28:27Z at 2007-04-23T20:28:27Z by SystemAdmin
  • rdamours91
    rdamours91
    20 Posts

    Re: Report Available: MS Patch Status Report

    ‏2007-04-26T17:14:19Z  
    I used the built in filtering and the report works great...

    Any additional reports that you provide would be great...
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-01-07T20:33:52Z  
    Besides using the WebReports filter how would one go about filtering the results to a retrieved property and computer group? I ask because I'm working on a patch report that needs to parse out the workstations and servers as well as >40 different computer groups. I'm guessing I'm going to have to make 80 calls but if I can figure out how to filter the calls I think I can code the table into the format I want. Any help is appreciated.

    The final result I'm looking for is something like

    Patch OS Type PatchedRegion1 RelevantRegion1 ...
    MSxx-xxx Workstation
    MSxx-xxx Server
    .
    .
    .
  • StacyLee
    StacyLee
    30 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-01-07T20:55:10Z  
    Nice Report. However I can't get it to email out. The message gets to my inbox w/o the graphic. Does it work for anyone else or should it work?
    Updated on 2008-01-07T20:55:10Z at 2008-01-07T20:55:10Z by StacyLee
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-01-07T21:56:00Z  
    You're probably seeing the Preprocessing vs Javascript issue: http://forum.bigfix.com/viewtopic.php?id=1379
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-01-08T04:05:19Z  
    Hello Zak, I had a question:
    I'm trying to modify the report to output dates that are sortable e.g. YYYY/MM/DD. Looking at your code you seem to use:
    "(if (exists results whose (exists last became nonrelevant of it) of it) then (((date (local time zone) of it) as string"
    to retrieve the source release date. It doesn't seem to always be accurate and I was wondering why you used that over the "source release date" property. I tried replacing it with:
    "(year of it as string & "/" & (if (length of it =1) then ("0"&it) else it) of (month of it as integer as string) & "/" & (if (length of it =1) then ("0"&it) else it) of (day_of_month of it as string)) of source release date of it"
    but I can't get it to work. In the presentation debugger:
    "(year of it as string & "/" & (if (length of it =1) then ("0"&it) else it) of (month of it as integer as string) & "/" & (if (length of it =1) then ("0"&it) else it) of (day_of_month of it as string)) of source release dates of fixlets of bes site whose (name of it ="Enterprise Security")"
    does work.

    If you could point me in the right direction or another post (I already tried searching) in regards to my question above I would be grateful as well. Thank you.
    Updated on 2008-01-08T04:05:19Z at 2008-01-08T04:05:19Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-01-10T23:51:01Z  
    I think I found a workaround for my first question of filtering results by a retrieved property: create a Fixlet using the retrieved property then use unions and intersections (http://forum.bigfix.com/viewtopic.php?id=1217).
  • taylordm10191
    taylordm10191
    3 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-04-17T19:32:37Z  
    Any way to get this report to work on a custom site? We don't use Enterprise Security in our production environment and I can't seem to get it to run when I change the site name to one of our custom sites.
  • BenKus
    BenKus
    597 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-04-18T04:22:36Z  
    Try changing the "<?Relevance ... ?>" line to:


    <?Relevance javascript array "patches" of ((first 9 of name of it & "-!-" & applicable computer count of it as string & "-!-" & number of results whose (exists last became relevant of it AND exists last became nonrelevant of it and last became relevant of it < last became nonrelevant of it) of it as string & "-!-" & category of it & "-!-" & (if (exists results whose (exists last became nonrelevant of it) of it) then (((date (local time zone) of it) as string & "-!-" & ((now - it)/day) as string) of (minimum of last became nonrelevants of results of it) ) else "n/a-!-n/a" )) of fixlets whose (name of it starts with "MS" AND name of it does not contain "CORRUPT" AND exists last became nonrelevants of results of it) of bes sites) ?>


    Ben
  • taylordm10191
    taylordm10191
    3 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-04-18T14:30:49Z  
    Ben--thanks. I knew I was missing a subtle change in the relevance, just couldn't get it going quite right.
  • jcsUTSW
    jcsUTSW
    10 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-04-18T17:07:12Z  
    How do I run this on a single machine?
    I need to be able to send clients what patches are installed as well as which patches are outstanding.

    Thanks
  • jessewk
    jessewk
    179 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-04-18T17:08:59Z  
    You can use the built-in web reports filters to only show data from the set of machines you care about.
  • SystemAdmin
    SystemAdmin
    890 Posts

    Re: Report Available: MS Patch Status Report

    ‏2008-07-21T14:17:34Z  
    As I would only be interested in reporting on servers that require patches, is there a way to prevent the systems that are 100% patched from being displayed?
  • TommyG91
    TommyG91
    18 Posts

    Re: Report Available: MS Patch Status Report

    ‏2009-07-23T17:32:11Z  
    Zak,

    This is a very nice report. Instead of seeing how many computers need the patch, I want to see how many patches are needed per computer. So, instead of a list of patches and a count of how many servers need that patch, I need to see a list of computers and how many patches each computer needs. Is it possible to modify this report, or should I just start over?

    I tried filtering on a baseline (patch policy) but the repot goes into "loading" indefinitely.

    Thanks for any help you can provide.

    Tom
  • Lee Wei
    Lee Wei
    599 Posts

    Re: Report Available: MS Patch Status Report

    ‏2009-08-03T18:34:03Z  
    Tom,

    Please take a look at this report from the perspective of the Computers.
    http://forum.bigfix.com/viewtopic.php?id=3641

    Lee Wei
  • TommyG91
    TommyG91
    18 Posts

    Re: Report Available: MS Patch Status Report

    ‏2009-10-19T20:41:49Z  
    There are no graphs in this report.

    Make sure you are using IE, not firefox. It doesn't work well with firefox, for me, anyway.

    This is still a great report. I use it every time I patch.
  • JesseR91
    JesseR91
    38 Posts

    Re: Report Available: MS Patch Status Report

    ‏2009-10-19T20:44:34Z  
    This report is throwing the following error and is not displaying.

    Webpage error details

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
    Timestamp: Mon, 19 Oct 2009 20:55:55 UTC
    Message: 'Results' is undefined
    Line: 118
    Char: 2
    Code: 0
    URI: http://ftxbigfix1.saxonmsi.com/webreports?page=Report&ReportID=14
    I have tried using IE 8 and Firefox
  • TommyG91
    TommyG91
    18 Posts

    Re: Report Available: MS Patch Status Report

    ‏2009-10-19T20:47:40Z  
    I have had a couple instances where I had a large baseline and a large group of computers where it didn't work. Try a small, simple baseline, and a group with only a few computers in it to start. If that works, experiment with different groups and different baselines until you find the combination that breaks it.
  • JesseR91
    JesseR91
    38 Posts

    Re: Report Available: MS Patch Status Report

    ‏2009-10-19T20:58:05Z  
    TommyG
    There are no graphs in this report.

    Make sure you are using IE, not firefox. It doesn't work well with firefox, for me, anyway.

    This is still a great report. I use it every time I patch.
    There are no graphs? What is that picture at the very top? I see a graph and then I see the patches below it. Am I missing something? I keep getting an IE error stating 'results' not defined. I only have 2 computers in BigFix at the moment.
    Updated on 2009-10-19T20:58:05Z at 2009-10-19T20:58:05Z by JesseR91