Difference between revisions of "BigFix"
From RiceFamily Wiki
(→Documentation) |
(→REST API Content) |
||
| Line 78: | Line 78: | ||
* https://forum.bigfix.com/t/baselines-and-restapi-what-gives/11940 | * https://forum.bigfix.com/t/baselines-and-restapi-what-gives/11940 | ||
* https://forum.bigfix.com/t/example-in-vb-net-soap-api/12051 | * https://forum.bigfix.com/t/example-in-vb-net-soap-api/12051 | ||
| + | * [https://forum.bigfix.com/t/need-help-with-a-relevance-statement/16561/2 Relevance to export all properties for all computers] | ||
== IBM AIX Support in BigFix == | == IBM AIX Support in BigFix == | ||
Revision as of 04:48, 3 April 2016
Contents
- 1 Sites
- 2 Diagnostics
- 3 Remote Site Relay Hardware
- 4 I Want to ...
- 5 Content
- 5.1 Documentation
- 5.2 Diagnostics
- 5.3 Utilities
- 5.4 Logging Documentation
- 5.5 Service Now Items of Note
- 5.6 OS Deployment
- 5.7 REST API Content
- 5.8 IBM AIX Support in BigFix
- 5.9 Custom Content Creation
- 5.10 Interesting items
- 5.11 Documentation
- 5.12 IEM Component Articles
- 5.13 Tools that might be useful
- 5.14 Pages about odd information
- 6 Projects
- 7 Support Links
Sites
Diagnostics
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_adding_a_datasource.html?cp=SS6MER_9.2.0&lang=en
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_deploy_standaloneWR.html
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_configuring_AD_web_reports.html
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_post_LDAP_upgrade_steps.html
Remote Site Relay Hardware
I need to spec out hardware for Relays to place at "Remote" locations. These systems don't need to have massive processors or tons of RAM, they just need a decent network connection, and they need to be cheap.
After a little Googling I found these systems ...
- Lenovo RS140 - $746.10
Our Facilities Manager doesn't like them because they don't have Dual Power Supplies. My thought is "that's fine", I plan to use them in an N+1 configuration for each location anyway. If there is even dual power available at a location, we can always connect the even numbered units to one leg of power and the odd numbered units to the other leg of power. If power fails at a site, my guess is most of the workstations will go with it, and there won't be a huge need for the Relays ANYWAY.
So now begins the search for inexpensive rackable computers with Dual Power Supplies until I can convince someone it's a bad idea.
- Dell PowerEdge R420 (Cannot locate on Dell's Web Site)
- Dell PowerEdge R330 - $1,385.40 - Configured with No OS, No RAID, 500GB SATA Drive, Dual Power Supplies and 8GB RAM.
- [1] - "Ribbed for your viewing pleasure!" External Cooling vanes. Not Rack mountable and very expensive. Not an option, but funny!
- ABMX rack mountable server - $1,238 with dual PS, 8gb ram, and 500gb hd
- ABMX Rack mountable servers
- Wall Mount Rack
I Want to ...
- Know How BigFix works
- View information about BigFix managed computers
- Install the BigFix client on Windows
- Install the BigFix clinet on Windows from the DMZ or Outside the Network
- Install the BigFix client on OS X
- Install the BigFix clinet on OS X from the DMZ or Outside the Network
- Install the BigFix client on Linux
- Install the BigFix clinet on Linux from the DMZ or Outside the Network
- Create a Patching Baseline for the Citrix Servers
- Create a Patching Baseline for the Monthly Microsoft patches
- [Change the Owner property for the BigFix Client]]
- Parse CSV with Regular Expressions and Tuples
- Deploy the BigFix Client to a number of remote computers
Content
Documentation
- List of All Client and Server Settings
- List of all current Client Settings as of 2/27/2016 Version <= 9.5
- Videos related to IBM BigFix
- Managing VM managers
- DSA replication is failing with named instance databases
Strings from BESRelay.exe that look like settings
Strings from BESClient.exe that look like settings
Diagnostics
Utilities
Logging Documentation
Service Now Items of Note
- TASK1086082 - Requested access to Server 2012R2 ISO
- RITM0819411/REQ0812148 - Requested DMZ Server for BigFix/Service-Now Test/Dev
- Tools to interact with BigFix SOAP API
- FOrums.BigFix.com posting about ServiceNow
OS Deployment
REST API Content
- https://forum.bigfix.com/t/baselines-and-restapi-what-gives/11940
- https://forum.bigfix.com/t/example-in-vb-net-soap-api/12051
- Relevance to export all properties for all computers
IBM AIX Support in BigFix
Custom Content Creation
- Make-Prefetch now supports both Python 2 & 3
- Creating Parameterized Fixlet's
- How can I write an action statement that provides information about the operator who runs a task or fixlet on the client
- Using WOW64 Redirection
- Detect and Remove malicious eDell root certificate
Interesting items
- Is today the 2nd Tuesday of the month?
- Undelete Actions via SQL commands
- Customizing the Self-Service Portal
- SQL Analysis Properties
- if exists (domain users(names of logged on users))then full names of domain users(names of logged on users)else if exists (users(names of logged on users)) then "local account" else "none"
- File being Uploaded never shows Completed Status in Software Distribution dashboard
- Internet Facing Relays
- Need a Secure way to prompt a console user for a password
- BigFix OS Deployment Content
- Enable Custom Site to bypass a Client Lock State
- Terminal Services Recommended Settings
- BitLocker Analysis
- BitLocker Events from Logs
- Adjust Console Timeout settings to prevent Error 28's
- Get the current Action Name while running the Action
- Download Folder Path
- POSTMan
- Tracking Logins for Local Administrator Accounts
- Configure Preference for IP v4
- Is there a way to externally tell if an action is running?
Client Installation Information
- Can I automatically assign a Relay when installing a client
- Deploying clients that won't be able to talk to the IEM server
- Forum post about Mac Client installation issues
Client Configuration Content
Creating Custom Content
- exists keys "HKEY_LOCAL_MACHINE\SOFTWARE\Sassafras\Install\KeyAccess" of (x64 registries; x32 registries)
- Automatically creating patches using BigFix Fixlets - VERY Cool Concept!
- Omitting HTML tag from BES Fixlet Descriptions
- Interesting Ideas for Fixlets
- SavingThrow Anti-ADWare
- Dual Monitor Relevance - Still needs work. Doesn't report correct results on my Lenovo AIO.
- Install IEM OSD on Air Gapped IEM for PIN
- IEM Tickets to Remember
- Notes on intentionally Air-Gapping an IEM Installation
- IBM Endpoint Manager Relevance Language Information
- IBM Endpoint Manager Action Information
- IBM Endpoint Manager Web Reports
- Software Installation Information
- Disaster Server Architecture
- IBM Endpoint Manager API Scripting
- https://forum.bigfix.com/t/microsoft-patch-tuesday-detail-summary-report/6786
- https://forum.bigfix.com/t/relevance-question-sum-of-applicable-computer-counts-and-group-membership/12245
- Software Installation Documentation
- Relevance Cheat Sheet
- RESTAPI: Generate uninstall tasks for all MSI applications on target computer - Windows
- TEM Client Deployment in a VDI Cloned pool infrastructure
- Allow non-Master Operators to stop other actions
- Retrieve information for a Removed Computer before the database is purged
- Enumerate Multiple Monitors
- Gather files from endpoints
- Connecting your IEM Environment to Bigfix.Me
- IEM Tickets to Remember
- Forum post about Mac Client installation issues
- Notes on intentionally Air-Gapping an IEM Installation
- IBM Endpoint Manager Relevance Language Information
- IBM Endpoint Manager Action Information
- IBM Endpoint Manager Web Reports
- Software Installation Information
- Disaster Server Architecture
- IBM Endpoint Manager API Scripting
- https://forum.bigfix.com/t/microsoft-patch-tuesday-detail-summary-report/6786
- https://forum.bigfix.com/t/relevance-question-sum-of-applicable-computer-counts-and-group-membership/12245
- Software Installation Documentation
- RESTAPI: Generate uninstall tasks for all MSI applications on target computer - Windows
- TEM Client Deployment in a VDI Cloned pool infrastructure
- Allow non-Master Operators to stop other actions
- Retrieve information for a Removed Computer before the database is purged
Documentation
- FTP Server with the BigFix 9.2 Documentation in PDF format
- JGStew keeps a page with Documentation links on it
- Logged On User Information
- IBM Endpoint Manager Version 9.0 - DOCUMENTATION
- REST API Documentation
- Inspector Documentation
- Bigfix.me Inspector Guide
- IEM Video on YouTube
- Upload and Archive Manager
- Baseline Information
- Fixlet Authoring
- Recommended Client Settings from JGStew
- Creating Custom Dashboards for Bigfix
- Action Object Documentation
- Schedule-able Compliance by Computer Web Reports
- RedHat Patching Documentation
- MsiExec.exe and InstMsi.exe Error Messages
- BigFix Server Automation Documentation
- Server Disk Performance
- Decompress Utility
- Relay Autoselection Failsafe Controls
- How do I turn on more detailed logging for the TEM Client?
- How do I turn on detailed message debug logging for the non-Windows TEM Client?
- Relays.dat Parser
- FORUM: Windows or Linux Relay
IEM Component Articles
Tools that might be useful
- Microsoft ORCA.exe
- Netwrix Change Audit Tool for Windows Server
- A quick look at the IBM endpoint Security Strategy
- Yara Malware tool
Pages about odd information
- Null Session Shares (not a good idea!)
- A quick look at the IBM Endpoint Security Strategy
