Analysis | BES Client Info - Windows

Start type of BESClient

Period 1 day

* Results in a true/false

start type of service "BESClient"

DelayedAutoStart

Period 1 day

* Results in a true/false

(value "DelayedAutoStart" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BESClient" of registry) as string

Evaluation Loop Average

Period 6 hours

* Results in a "string"/number

less significance 3 of (average of evaluationcycle of client as floating point / 1000 / 60)

Evaluation Cycle Maximum

Period 6 hours

* Results in a "string"/number

((maximum of it /1000* second)/minute) of evaluationcycle of client

Download Cache Limit (MB)

Period 12 hours

* Results in a true/false

if (not exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client" whose(exists key "_BESClient_Download_DownloadsCacheLimitMB" of it AND exists value "value" of key "_BESClient_Download_DownloadsCacheLimitMB" of it) of registry) then ERROR "not set - 20" else (value "value" of key "_BESClient_Download_DownloadsCacheLimitMB" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client" whose(exists key "_BESClient_Download_DownloadsCacheLimitMB" of it AND exists value "value" of key "_BESClient_Download_DownloadsCacheLimitMB" of it) of registry) as string

Utility Cache Limit (MB)

Period 12 hours

* Results in a true/false

if (not exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client" whose(exists key "_BESClient_Download_UtilitiesCacheLimitMB" of it AND exists value "value" of key "_BESClient_Download_UtilitiesCacheLimitMB" of it) of registry) then ERROR "not set - 10" else (value "value" of key "_BESClient_Download_UtilitiesCacheLimitMB" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client" whose(exists key "_BESClient_Download_UtilitiesCacheLimitMB" of it AND exists value "value" of key "_BESClient_Download_UtilitiesCacheLimitMB" of it) of registry) as string

CommandPollInterval

Period 12 hours

* Results in a true/false

if(not exists setting "_BESClient_Comm_CommandPollEnable" whose(value of it = "1") of client) then ERROR "disabled" else (if(not exists setting "_BESClient_Comm_CommandPollIntervalSeconds" of client) then ERROR "not set" else (value of setting "_BESClient_Comm_CommandPollIntervalSeconds" of client))

Download Cache Size

Period 12 hours

* Results in a true/false

(if (0<(it / (1024*1024*1024*1024))) then (it / (1024*1024*1024*1024)) as string & " TB" else if (0<(it / (1024*1024*1024))) then (it / (1024*1024*1024)) as string & " GB" else if (0<(it / (1024*1024))) then (it / (1024*1024)) as string & " MB" else if (0<(it / (1024))) then (it / (1024)) as string & " KB" else (it as string & " B")) of (sum of sizes of descendants of folder "__BESData\__Global\__Cache\Downloads" of parent folder of client)

Utility Cache Size

Period 12 hours

* Results in a true/false

(if (0<(it / (1024*1024*1024*1024))) then (it / (1024*1024*1024*1024)) as string & " TB" else if (0<(it / (1024*1024*1024))) then (it / (1024*1024*1024)) as string & " GB" else if (0<(it / (1024*1024))) then (it / (1024*1024)) as string & " MB" else if (0<(it / (1024))) then (it / (1024)) as string & " KB" else (it as string & " B")) of (sum of sizes of descendants of folder "__BESData\__Global\__Cache\Utilities" of parent folder of client)

Log&History Size

Period 6 hours

* Results in a true/false

(
    if
    (
        0<
        (
            it /
            (
                1024*1024*1024*1024
            )
        )
    )
    then
    (
        it /
        (
            1024*1024*1024*1024
        )
    )
    as string & " TB" else if
    (
        0<
        (
            it /
            (
                1024*1024*1024
            )
        )
    )
    then
    (
        it /
        (
            1024*1024*1024
        )
    )
    as string & " GB" else if
    (
        0<
        (
            it /
            (
                1024*1024
            )
        )
    )
    then
    (
        it /
        (
            1024*1024
        )
    )
    as string & " MB" else if
    (
        0<
        (
            it /
            (
                1024
            )
        )
    )
    then
    (
        it /
        (
            1024
        )
    )
    as string & " KB" else
    (
        it as string & " B"
    )
)
of
(
    (
        (
            sum of sizes of files whose
            (
                name of it ends with ".log"
            )
            of it
        )
        +
        (
            sum of sizes of files whose
            (
                name of it ends with ".log"
            )
            of folder "__BESData\__Global\Logs" of it
        )
        +
        (
            sum of sizes of files whose
            (
                name of it ends with "History.db"
            )
            of folder "__BESData\__Global" of it
        )
    )
    of parent folder of client
)

(if (0<(it / (1024*1024*1024*1024))) then (it / (1024*1024*1024*1024)) as string & " TB" else if (0<(it / (1024*1024*1024))) then (it / (1024*1024*1024)) as string & " GB" else if (0<(it / (1024*1024))) then (it / (1024*1024)) as string & " MB" else if (0<(it / (1024))) then (it / (1024)) as string & " KB" else (it as string & " B")) of (((sum of sizes of files whose(name of it ends with ".log") of it) + (sum of sizes of files whose(name of it ends with ".log") of folder "__BESData\__Global\Logs" of it) + (sum of sizes of files whose(name of it ends with "History.db") of folder "__BESData\__Global" of it)) of parent folder of client)

_BESClient_ComputerType

Period 12 hours

* Results in a true/false

if (not exists setting "_BESClient_ComputerType" whose (exists value of it) of client) then ERROR "not set" else (value of setting "_BESClient_ComputerType" whose (exists value of it) of client)

Computer Type relevance

Period 12 hours

* Results in a true/false

(
    if name of operating system = "Mac OS X" then
    (
        if
        (
            (
                exists key whose
                (
                    it as string as lowercase contains "battery"
                )
                of entries of dictionaries of nodes of it
            )
            or
            (
                exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry
            )
            of it
        )
        of service plane of iokit registry then "Laptop" else "Workstation"
    )
    else
    (
        if
        (
            name of operating system as lowercase starts with "win"
        )
        then
        (
            if
            (
                name of operating system = "Win95" OR name of operating system = "Win98" or name of operating system = "WinME"
            )
            then "Workstation" else
            (
                if
                (
                    (
                        exists wmi
                    )
                    and
                    (
                        (
                            (
                                exists selects "* from win32_Battery" of wmi
                            )
                            and
                            (
                                exists descriptions whose
                                (
                                    it as string as lowercase = "Microsoft ACPI-Compliant Control Method Battery" as lowercase
                                )
                                of active devices
                            )
                        )
                        OR exists
                        (
                            (
                                (
                                    8; 9; 10; 11; 12; 14; 18; 21
                                )
                                ,
                                (
                                    integer values of selects "ChassisTypes from Win32_SystemEnclosure" of wmi
                                )
                            )
                            whose
                            (
                                item 0 of it = item 1 of it
                            )
                        )
                    )
                )
                then "Laptop" else
                (
                    if
                    (
                        value "ProductType" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" of registry = "WinNT"
                    )
                    then "Workstation" else "Server"
                )
            )
        )
        else "Unknown"
    )
)

(if name of operating system = "Mac OS X" then( if ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry then "Laptop" else "Workstation" ) else (if (name of operating system as lowercase starts with "win") then (if (name of operating system = "Win95" OR name of operating system = "Win98" or name of operating system = "WinME") then "Workstation" else (if ((exists wmi) and (((exists selects "* from win32_Battery" of wmi) and (exists descriptions whose (it as string as lowercase = "Microsoft ACPI-Compliant Control Method Battery" as lowercase) of active devices)) OR exists (( (8; 9; 10; 11; 12; 14; 18; 21), (integer values of selects "ChassisTypes from Win32_SystemEnclosure" of wmi) ) whose (item 0 of it = item 1 of it)))) then "Laptop" else (if (value "ProductType" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" of registry = "WinNT") then "Workstation" else "Server"))) else "Unknown"))

Cached ComputerType matches relevance?

Period 12 hours

* Results in a true/false

(
    if
    (
        not exists setting "_BESClient_ComputerType" whose
        (
            exists value of it
        )
        of client
    )
    then ERROR "not set" else
    (
        value of setting "_BESClient_ComputerType" whose
        (
            exists value of it
        )
        of client
    )
)
=
(
    if name of operating system = "Mac OS X" then
    (
        if
        (
            (
                exists key whose
                (
                    it as string as lowercase contains "battery"
                )
                of entries of dictionaries of nodes of it
            )
            or
            (
                exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry
            )
            of it
        )
        of service plane of iokit registry then "Laptop" else "Workstation"
    )
    else
    (
        if
        (
            name of operating system as lowercase starts with "win"
        )
        then
        (
            if
            (
                name of operating system = "Win95" OR name of operating system = "Win98" or name of operating system = "WinME"
            )
            then "Workstation" else
            (
                if
                (
                    (
                        exists wmi
                    )
                    and
                    (
                        (
                            (
                                exists selects "* from win32_Battery" of wmi
                            )
                            and
                            (
                                exists descriptions whose
                                (
                                    it as string as lowercase = "Microsoft ACPI-Compliant Control Method Battery" as lowercase
                                )
                                of active devices
                            )
                        )
                        OR exists
                        (
                            (
                                (
                                    8; 9; 10; 11; 12; 14; 18; 21
                                )
                                ,
                                (
                                    integer values of selects "ChassisTypes from Win32_SystemEnclosure" of wmi
                                )
                            )
                            whose
                            (
                                item 0 of it = item 1 of it
                            )
                        )
                    )
                )
                then "Laptop" else
                (
                    if
                    (
                        value "ProductType" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" of registry = "WinNT"
                    )
                    then "Workstation" else "Server"
                )
            )
        )
        else "Unknown"
    )
)

(if (not exists setting "_BESClient_ComputerType" whose (exists value of it) of client) then ERROR "not set" else (value of setting "_BESClient_ComputerType" whose (exists value of it) of client)) = (if name of operating system = "Mac OS X" then( if ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry then "Laptop" else "Workstation" ) else (if (name of operating system as lowercase starts with "win") then (if (name of operating system = "Win95" OR name of operating system = "Win98" or name of operating system = "WinME") then "Workstation" else (if ((exists wmi) and (((exists selects "* from win32_Battery" of wmi) and (exists descriptions whose (it as string as lowercase = "Microsoft ACPI-Compliant Control Method Battery" as lowercase) of active devices)) OR exists (( (8; 9; 10; 11; 12; 14; 18; 21), (integer values of selects "ChassisTypes from Win32_SystemEnclosure" of wmi) ) whose (item 0 of it = item 1 of it)))) then "Laptop" else (if (value "ProductType" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" of registry = "WinNT") then "Workstation" else "Server"))) else "Unknown"))

UDP command received by client?

Period 6 hours

* Results in a true/false

exists lines whose(it contains "GatherHashMV command received" OR it contains "DownloadPing command received" OR it contains "ForceRefresh command received") of files whose((name of it ends with ".log" OR name of it ends with ".bkg") AND exists lines of it) of folder "__BESData\__Global\Logs" of parent folder of client

Number of UDP commands received by client?

Period 1 day

* Results in a true/false

number of lines whose(it contains "GatherHashMV command received" OR it contains "DownloadPing command received" OR it contains "ForceRefresh command received") of files whose((name of it ends with ".log" OR name of it ends with ".bkg") AND exists lines of it) of folder "__BESData\__Global\Logs" of parent folder of client

# of Logs

Period 6 hours

* Results in a true/false

number of files whose((name of it ends with ".log" OR name of it ends with ".bkg") AND exists lines of it) of folder "__BESData\__Global\Logs" of parent folder of client

# of lines of logs

Period 1 day

* Results in a true/false

number of lines of files whose((name of it ends with ".log" OR name of it ends with ".bkg") AND exists lines of it) of folder "__BESData\__Global\Logs" of parent folder of client

Search for:	Relevance	Fixlets/Tasks
	Analyses	BFI Signatures
	Dashboard/Wizard

Title	Keywords	Description
Relevance	Domain	ActionScript
Mime	Signature Content	(clear all)

1	BES Client Info - Windows	6/20/2013 10:11:11 AM
2	BES Client Info - Windows	8/16/2013 7:03:27 AM
3	BES Client Info - Windows	12/9/2013 11:49:28 AM
4	BES Client Info - Universal	3/21/2014 2:46:24 PM
5	BES Client Info - Universal	4/14/2014 8:48:06 AM
6	BES Client Info - Universal	4/14/2014 8:56:56 AM
7	BES Client Info - Universal	7/28/2014 9:41:40 AM
8	BES Client Info - Universal	8/15/2014 7:20:22 AM
9	BES Client Info - Universal	9/24/2014 4:56:22 PM
10	BES Client Info - Universal	3/2/2015 2:13:56 PM

ID	2994529
Status	Beta - Preliminary testing ready for more
Title	BES Client Info - Windows
Domain	BESC
Added by	jgstew on 6/20/2013 10:11:11 AM
Last Modified by	jgstew on 6/20/2013 10:11:11 AM
Counters	3700 Views / 5 Downloads
User Rating	* Average over 0 ratings. ** Log In or Register to add your rating.


Content Search Share Learn Projects	Utilities View SCM Scripts Base64 Converter Shell to Action Script	About About Us Tour FAQ Terms Contact Us	BigFix Resources Download BigFix Support Forum Github/Bigfix

BES Client Info - Windows - superseded
Log In or Register to download the BES file, and more.

Versioning - This is an older version.

Description

Property Details

Properties

Relevance

Sharing

Comments

Content

Utilities

About

BigFix Resources

BES Client Info - Windows - superseded Log In or Register to download the BES file, and more.

Versioning - This is an older version.

Description

Property Details

Properties

Relevance

Sharing

Comments

Content

Utilities

About

BigFix Resources

BES Client Info - Windows - superseded
Log In or Register to download the BES file, and more.