Patch Details

Introduction

The Patch Details app provides you the detailed patch information. For each resource, this will show which patches were missing, installed, approved, failed, blacklisted, whitelisted, and excluded. This app supports to query the patches by resource or patch attributes. For this the Query builder has the option to switch between resource and patch OpsQl.
It supports at both Partner/Client level user accounts.

Configuration Parameters

The patch details app can be configured in two ways: by selecting the RESOURCE or by SEARCHPATCH options.

Configure by selecting RESOURCE option

• Add Query:
  • Default query: The default query ( agentInstalled = “true” AND state = “active” AND monitorable = “true” ) will be populated by default when the patch details app opens. Users are able to modify/delete the default query and run this specific query.
  • Using an OpsQL query, you can customize the report result. If users did not select “state” and “monitorable” attributes in the query string, in that case the user selection query would be appended by default with “state” and “monitorable” attributes.
    For example: if a user only selects the resource.agentInstalled attribute, the query will automatically append state = ‘active’ AND monitorable = true
    
    The query will look like as below:
    (resource.agentInstalled = “true”) AND state = ‘active’ AND monitorable = true
• Client Selection: You can select a single Client / All Clients from the dropdown list. Only selected client data will get into the report.
• Status Selection: Choose the patch status from the drop down list for which you want to generate the report. The user can select single/multi/all options from the list.
• Category Selection: The user can choose the type of category from a drop down list. From the list, you can select single/multi/all options.
  The categories are as follows: critical, feature packs, security, updates, and update rollups.
• Supported Analysis Period: Supported analysis periods are: Last 24 hours, 7 days, Last month, Last 3 months, and specific period.
• Attributes Selection:
  • Default attributes: The default attributes (resource.ipAddress, searchpatch.category etc.) will be populated by default. Users can modify/delete default attributes and select the required attributes to view in the report.
  • Only selected attributes related data will be included in the report. If no attributes are selected, the default attributes data will be included in the report. The user can select a maximum of 20 attributes.
    The attributes are related with both SEARCHPATCH and RESOURCE.
  • You can customize the default attributes selection order by using the drag and drop functionality.
• Select Tags: Specify the custom attributes of selected entities to include columns in the report. You are allowed to select a maximum of 5 tags.
• Formats: Reports are generated only in XLSX format.

Configure by selecting SEARCHPATCH option

• Add Query:
  • Default query: The default query ( patchStatus = “MISSING” AND scanTime >= “-7d” ) will be populated by default when the patch details app opens. Users are able to modify/delete the default query and run this specific query.
  • If users did not select any “patchStatus” and patch date fields(ex: approvedTime, installedTime, scanTime) attributes in the query string, in that case the user selection query would be appended by default with “patchStatus” and patch date fields(installedTime, scanTime) attributes.
    For example: if a user only selects the approvedUser attribute, then the query will automatically append patchStatus = ‘Missing’ AND ((scanTime >= ‘-7d’) OR (installedTime >= ‘-7d’))
    
    The query will look like as below:
    (approvedUser = ‘Username’) AND (patchStatus = ‘Missing’) AND ((scanTime >= ‘-7d’) OR (installedTime >= ‘-7d’))
• Client Selection: You can select a single Client / All Client from the dropdown list. Only selected client data will get into the report.
• Attributes Selection:
  • Default attributes: The default attributes (resource.ipAddress, searchpatch.category etc.) will be populated by default. Users can modify/delete default attributes and select the required attributes to view in the report.
  • Only selected attributes related data will be included in the report. If no attributes are selected, the default attributes data will be included in the report. The user can select a maximum of 20 attributes.
    The attributes are related with both SEARCHPATCH and RESOURCE.
• Select Tags: Specify the custom attributes of selected entities to include columns in the report. You are allowed to select a maximum of 5 tags.
• Formats: Reports are generated only in XLSX format.

Reports Output

Once the report is generated, it will consist of the following sections:

• Summary: In this section, see the configuration details.
• Glossary: This section contains detailed information about each section present in the report tab, helping you to understand the generated data better.

Sample of reports in XLSX format:

Patch Report Vs Patch Details Atrributes

Next Steps

Refer to the Installation documentation on how to install and configure the apps.