BigFix Developer's Portal: https://developer.bigfix.com/
This section of the wiki includes the following information for the Fixlet Authoring:
- Inspector Documentation
- Using WOW64 Redirection
- BigFix Actions
- Relevance Debugger
- Relevance Tips
- Examples of Endpoint Manager Development Code
- Task + Analysis combo
- Complex Relevance Examples
- Creating custom Fixlets by using the Fixlet Maker (For Patch Management - Windows Application Updates)
In addition to pre-authored, pre-tested Solutions for Patch Management, Vulnerability Management, and Endpoint Security available with BigFix, administrators can use the authoring environment integrated within the console to create powerful custom Fixlets, Tasks, and Analyses to enforce policies, view computer information, detect and remediate vulnerabilities and many other configuration management issues.
For example, with custom Fixlet content, you can:
- Remove the new P2P software that is hogging all your company's bandwidth.
- Find those rogue DHCP servers that have been causing you so much network trouble.
- Update the custom applications in your company.
Here is some links to documentation that will help you learn how to use the Relevance and Action Language to create custom content.
Training Guides: Teach you how to use IBM BigFix authoring and the relevance language to create Fixlet messages
- Custom Authoring Training Guide (PDF) - Complete Guide to creating Custom Content for Windows including advanced Relevance Language training, advanced Action Language Training, QNA error messages, and strategies for creating Fixlet messages.
- How to create custom SCM content that works with TEM Analytics reporting.
Action Libraries - Reference libraries that contain information about how to use actions in Fixlet messages or in custom actions
- Actions - Information and examples on how to use actions in BigFix.
- Action Guide (Knowledge Center)
For BigFix 9.5: http://www.ibm.com/support/knowledgecenter/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Action/c_action_language.html
For BigFix 9.2: http://www.ibm.com/support/knowledgecenter/SSQL82_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Action/c_action_language.html
- REST-API introduction : https://developer.bigfix.com/rest-api/
- REST-API Examples: https://developer.bigfix.com/rest-api/examples/
- Relevance Language Guide (Knowledge Center)
For BigFix 9.5: http://www.ibm.com/support/knowledgecenter/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Relevance/c_relevance_overview.html
For BigFix 9.2: http://www.ibm.com/support/knowledgecenter/SSQL82_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Relevance/c_relevance_overview.html
Inspector Libraries: Reference libraries that contains every piece of information that can be retrieved by the IBM BigFix agents for Fixlet messages and retrieved properties.
- Official sites:
- You may also use the following resources. Note that these are being deprecated.
- Inspector search: http://support.bigfix.com/inspectorsearch/inspector_search.html
- Inspectors Reference: http://support.bigfix.com/inspectors/World%20Objects_Any.html
- BigFix.me interactive inspector guide: http://bigfix.me/inspectorguide (Unofficial user updated)
Note: The following guides may be outdated. Please refer to the inspector lists in the wiki.
o Inspector library search utility - In addition to the manuals below, this search facility will allow you to search electronically among all of the platform inspectors.
o Windows Client Inspector Guide (PDF) - Last updated 7/6/2011
o Windows Mobile Inspector Guide (PDF) - Last updated 8/18/2011
o Linux Inspector Guide (PDF) - Last updated 8/18/2011
o Solaris Inspector Guide (PDF) - Last updated 8/18/2011
o HPUX Inspector Guide (PDF) - Last updated 8/18/2011
o AIX Inspector Guide (PDF) - Last updated 8/18/2011
o Macintosh Inspector Guide (PDF) - Last updated 8/18/2011
o BigFix Session Inspectors Guide (PDF) - Last updated 8/18/2011
o Core Inspectors Guide (PDF) - Last updated 8/18/2011
Note: Custom authoring support is not included in the standard BigFix support contract. You will need to purchase a Custom Authoring support contract if you would like help creating custom content.
Classes are also available for detailed custom authoring training. Contact Professional Services for more information.
Fixlet Debugger (QnA)
You can download the Fixlet Debugger application from this page:
Instructions for using the Fixlet Debugger
- Download the zip file above and extract to a folder.
- Run the RelevanceDebugger.exe file. A notepad-like interface will appear with a top and bottom window.
- Type any relevance expression, then select the "Edit" menu followed by the "Evaluate option" or press Ctrl+Enter. For instance, type name of operating system and hit Ctrl+Enter. You should see the answer returned as something like Win7.
- See the "Relevance Language Documentation" above or Relevance Tips for more information on creating relevance statements and resolving errors.
Note: Non-Windows IEM Clients already contain an appropriate version of QnA for the operating system they run on. The program file is contained as part of the IEM Client package distribution.
Note: QnA will behave differently on Vista IEM Clients unless it is run with elevated privileges. If it is run in the standard user space it may return answers different than the actual IEM Client. The following inspectors in particular are affected by this: regapp, recent applications, services (and any inspectors that reference process information).
- Download: sha1.exe Version 126.96.36.199 (375 KB)
- Description When creating a Fixlet message action or custom action that downloads a file from the Internet or an untrusted source, it is always a good idea to verify that a checksum of the file matches a known value before running the file to ensure that you downloaded the correct unchanged file. The sha1.exe application will generate an action command that will verify the size and SHA1 checksum of a file. This action command can be pasted into the action of a Fixlet message so that the IEM Client can verify the checksum before the IEM Client executes the file.
Note: the sha1 value in the action will also allow the IEM Server and IEM Relay to maintain a persistent cache of the downloaded files.
A "prefetch" statement can be generated using the sha1.exe file. Simply run the sha1.exe file with the argument "-r <filename>" from the command line. For example:
C:\>sha1.exe -r package.exe You would then copy this result into a custom action or Fixlet action.
prefetch sha1.exe sha1:9370b0019a942400cfebfbdf15c107bbecdc8b0a
The argument -c puts the result string into you paste buffer so you don't need to copy/paste out of the command window.