The Patch Details app provides you the detailed patch information. For each resource, this will show which patches were missing, installed, approved, failed, blacklisted, whitelisted, and excluded. This app supports to query the patches by resource or patch attributes. For this the Query builder has the option to switch between resource and patch OpsQl.
It supports at both Partner/Client level user accounts.
The patch details app can be configured in two ways: by selecting the RESOURCE or by SEARCHPATCH options.
Configure by selecting RESOURCE option
- Add Query:
- Default query: The default query ( agentInstalled = “true” AND state = “active” AND monitorable = “true” ) will be populated by default when the patch details app opens. Users are able to modify/delete the default query and run this specific query.
- Using an OpsQL query, you can customize the report result. If users did not select “state” and “monitorable” attributes in the query string, in that case the user selection query would be appended by default with “state” and “monitorable” attributes.
For example: if a user only selects the resource.agentInstalled attribute, the query will automatically append state = ‘active’ AND monitorable = true
The query will look like as below:
(resource.agentInstalled = “true”) AND state = ‘active’ AND monitorable = true
- Select Client: You can select a single Client / All Clients from the dropdown list. Only selected client data will get into the report.
- Select Status: Choose the patch status from the drop down list for which you want to generate the report. The user can select single/multi/all options from the list.
- Select Category: The user can choose the type of category from a drop down list. From the list, you can select single/multi/all options.
The categories are as follows: critical, feature packs, security, updates, and update rollups. - Analysis Period: Supported analysis periods are: Last 24 hours, 7 days, Last month, Last 3 months, and specific period.
- Select Attributes:
- Default attributes: The default attributes (resource.ipAddress, searchpatch.category etc.) will be populated by default. Users can modify/delete default attributes and select the required attributes to view in the report.
- Only selected attributes related data will be included in the report. If no attributes are selected, the default attributes data will be included in the report. The user can select a maximum of 20 attributes.
The attributes are related with both SEARCHPATCH and RESOURCE.
- Formats: Reports are generated only in XLSX format.
Configure by selecting SEARCHPATCH option
- Add Query:
- Default query: The default query ( patchStatus = “MISSING” AND scanTime >= “-7d” ) will be populated by default when the patch details app opens. Users are able to modify/delete the default query and run this specific query.
- If users did not select any “patchStatus” and patch date fields(ex: approvedTime, installedTime, scanTime) attributes in the query string, in that case the user selection query would be appended by default with “patchStatus” and patch date fields(installedTime, scanTime) attributes.
For example: if a user only selects the approvedUser attribute, then the query will automatically append patchStatus = ‘Missing’ AND ((scanTime >= ‘-7d’) OR (installedTime >= ‘-7d’))
The query will look like as below:
(approvedUser = ‘Username’) AND (patchStatus = ‘Missing’) AND ((scanTime >= ‘-7d’) OR (installedTime >= ‘-7d’))
- Select Client: You can select a single Client / All Client from the dropdown list. Only selected client data will get into the report.
- Select Attributes:
- Default attributes: The default attributes (resource.ipAddress, searchpatch.category etc.) will be populated by default. Users can modify/delete default attributes and select the required attributes to view in the report.
- Only selected attributes related data will be included in the report. If no attributes are selected, the default attributes data will be included in the report. The user can select a maximum of 20 attributes.
The attributes are related with both SEARCHPATCH and RESOURCE.
- Formats: Reports are generated only in XLSX format.
Sample of Patch Details app reports in XLSX format:
Next Steps
Refer to the Installation documentation on how to install and configure the apps.