BigFix Client - Audit - Universal
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is the latest version.

1BigFix Client - Audit - Universal4/27/2016 8:37:58 AM
2BigFix Client - Audit - Universal5/10/2016 7:14:58 AM
3BigFix Client - Audit - Universal5/30/2016 10:21:14 AM
4BigFix Client - Audit - Universal7/19/2016 7:38:36 PM
5BigFix Client - Audit - Universal9/8/2016 6:17:52 AM
6BigFix Client - Audit - Universal9/27/2016 11:53:01 PM

Description

This analysis provides detailed information on the current status of the BigFix Client.

For the sake of the installed BigFix agent and for troubleshooting the evaluation cycles of clients it is highly recommended to tweak the client evaluation cycle tracking settings using:

  1. Config - Client Setting - Track Fixlet Count - 50
  2. Config - Client Setting - Track Fixlet Time Span - 1 Day

This analysis is almost based on the analysis written by jgstew (kudos, compliments, and credit completely to him) available here: https://bigfix.me/analysis/details/2994765

This Analysis provides information on the Installed BigFix Client:

Evaluation Cycle:

  • Average from last 10 evaluation cycles
  • Maximum time required for cycles since agent start
  • Eval %'s for various groups of content
  • Evaluations slower than 15 seconds
  • Evaluations slower than 1 minute
  • Evaluations slower than 15 minutes
  • Evaluations slower than 60 minutes
  • All Slow Evaluations

UDP Pings

  • Last UDP Ping Received
  • UDP Pings currently being received

CPU Utilization:

  • Max CPU Usage the Client is allowed to use

Client Logs

  • Number of logs
  • Number of log backups

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart


Property Details

ID2998424
TitleBigFix Client - Audit - Universal
DomainBESC
Added by on 9/27/2016 11:53:01 PM
Last Modified by on 9/27/2016 11:53:01 PM
Counters 973 Views / 39 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

Client - Evaluation Cycle (Average) - Universal
Period 6 hours
 
  * Results in a true/false
Show indented relevance
relative significance place 1 of (average of evaluationcycle of client as floating point / 1000 / 60)
Client - Evaluation Cycle (Max) - Universal
Period 6 hours
 
  * Results in a "string"/number
Show indented relevance
((maximum of it /1000* second)/minute) of evaluationcycle of client
Client - Resultant CPU Usage - Universal
Period 1 day
 
  * Results in a "string"/number
Show indented relevance
(((((it)/((it)+((if (not exists setting "_BESClient_Resource_SleepIdle" of client OR not exists value of setting "_BESClient_Resource_SleepIdle" of client) then 480 /* Default value */ else (value of setting "_BESClient_Resource_SleepIdle" of client as integer)) as floating point))) / (sum of cores of cpupackage as floating point)) * 100) as integer) of ((if (not exists setting "_BESClient_Resource_WorkIdle" of client OR not exists value of setting "_BESClient_Resource_WorkIdle" of client) then 10 /* Default value */ else (value of setting "_BESClient_Resource_WorkIdle" of client as integer)) as floating point)
Client - WorkIdle+SleepIdle - Universal
Period 12 hours
 
  * Results in a true/false
Show indented relevance
(value of setting "_BESClient_Resource_WorkIdle" of client as string as integer | 10) + (value of setting "_BESClient_Resource_SleepIdle" of client as string as integer | 480)
Client - Eval % Relevance - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
((relevance percent of it * 100) / (100-(sleep percent of it))) of evaluationcycle of client
Client - Eval % Property - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
((property percent of it * 100) / (100-(sleep percent of it))) of evaluationcycle of client
Client - Eval % Action - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
((action percent of it * 100) / (100-(sleep percent of it))) of evaluationcycle of client
Client - Eval % Gather - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
((gather percent of it * 100) / (100-(sleep percent of it))) of evaluationcycle of client
Client - Eval % Report - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
((report percent of it * 100) / (100-(sleep percent of it))) of evaluationcycle of client
Client - First Report Time - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
minimum of subscribe times of sites
Client - Evaluations Slower than 15 Seconds - Universal
Period 1 hour
 
  * Results in a true/false
Show indented relevance
it whose (preceding text of first ":" of it as floating point > 15 as floating point) of track fixlets whose (it contains "CustomSite" OR it as lowercase contains "opsite") of evaluationcycle of client
Client - Evaluations Slower than 1 Minute - Universal
Period 1 hour
 
  * Results in a true/false
Show indented relevance
it whose (preceding text of first ":" of it as floating point > 60 as floating point) of track fixlets whose (it contains "CustomSite" OR it as lowercase contains "opsite") of evaluationcycle of client
Client - Evaluations Slower than 15 Minutes - Universal
Period 1 hour
 
  * Results in a true/false
Show indented relevance
it whose (preceding text of first ":" of it as floating point > 900 as floating point) of track fixlets whose (it contains "CustomSite" OR it as lowercase contains "opsite") of evaluationcycle of client
Client - Evaluations Slower than 1 Hour - Universal
Period Every Report
 
  * Results in a true/false
Show indented relevance
it whose (preceding text of first ":" of it as floating point > 3600 as floating point) of track fixlets whose (it contains "CustomSite" OR it as lowercase contains "opsite") of evaluationcycle of client
Client - Slow Evaluations with Times - Universal
Period 1 hour
 
  * Results in a true/false
Show indented relevance
track fixlets whose (it contains "CustomSite" OR it as lowercase contains "opsite") of evaluationcycle of client
Client - Slow Evaluations - Universal
Period 1 hour
 
  * Results in a true/false
Show indented relevance
following texts of firsts ": " of track fixlets whose(it contains "CustomSite" OR it as lowercase contains "opsite") of evaluationcycle of client
Client - Last UDP Ping - Universal
Period 1 hour
 
  * Results in a true/false
Show indented relevance
last command times of client
Client - Receiving UDP Pings - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
exist last command time of client | exists lines containing " command received" of files whose (length of name of it = 12 and modification time of it > now - 2*day) of folders "Logs" of folders "__Global" of data folders of client
Client - Number of BigFix Log Files - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
number of files whose((name of it as lowercase ends with ".log") AND exists lines of it AND 12 = length of name of it) of folders "Logs" of folders "__Global" of data folder of client
Client - Number of BigFix Log Backups - Universal
Period 1 day
 
  * Results in a true/false
Show indented relevance
number of files whose((name of it as lowercase ends with ".bkg") AND exists lines of it AND 12 = length of name of it) of folders "Logs" of folders "__Global" of data folder of client

Relevance

Used in 16 analyses   * Results in a true/false
Show indented relevance
version of client > "8.0" /* some of the properties may work fine in older clients, and some require v9+ */

Sharing

Social Media:
Share this page on Yammer

Comments

jgstew -
This might be slightly more accurate approximation for when the client first started working with bigfix (after installation) in some cases: minima of ( (subscribe times of sites) ; (modification times of files of folders "KeyStorage" of parent folders of clients) )