BigFix
From RiceFamily Wiki
Contents
- 1 Sites
- 2 Items to Remember
- 3 Diagnostics
- 4 Current Issues
- 5 Remote Site Relay Hardware
- 6 Relevance
- 7 I Want to ...
- 8 Content
- 8.1 Documentation
- 8.2 Diagnostics
- 8.3 Utilities
- 8.4 Logging Documentation
- 8.5 Service Now Items of Note
- 8.6 OS Deployment
- 8.7 REST API Content
- 8.8 IBM AIX Support in BigFix
- 8.9 Custom Content Creation
- 8.10 Interesting items
- 8.11 Documentation
- 8.12 IEM Component Articles
- 8.13 Tools that might be useful
- 8.14 Pages about odd information
- 9 Projects
- 10 Support Links
Sites
Items to Remember
- KB0024021
Diagnostics
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_adding_a_datasource.html?cp=SS6MER_9.2.0&lang=en
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_deploy_standaloneWR.html
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_configuring_AD_web_reports.html
- http://www.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Web_Reports/c_post_LDAP_upgrade_steps.html
Current Issues
Remote Site Relay Hardware
I need to spec out hardware for Relays to place at "Remote" locations. These systems don't need to have massive processors or tons of RAM, they just need a decent network connection, and they need to be cheap.
After a little Googling I found these systems ...
- Lenovo RS140 - $746.10
Our Facilities Manager doesn't like them because they don't have Dual Power Supplies. My thought is "that's fine", I plan to use them in an N+1 configuration for each location anyway. If there is even dual power available at a location, we can always connect the even numbered units to one leg of power and the odd numbered units to the other leg of power. If power fails at a site, my guess is most of the workstations will go with it, and there won't be a huge need for the Relays ANYWAY.
So now begins the search for inexpensive rackable computers with Dual Power Supplies until I can convince someone it's a bad idea.
- Dell PowerEdge R420 (Cannot locate on Dell's Web Site)
- Dell PowerEdge R330 - $1,385.40 - Configured with No OS, No RAID, 500GB SATA Drive, Dual Power Supplies and 8GB RAM.
- [1] - "Ribbed for your viewing pleasure!" External Cooling vanes. Not Rack mountable and very expensive. Not an option, but funny!
- ABMX rack mountable server - $1,238 with dual PS, 8gb ram, and 500gb hd
- ABMX Rack mountable servers
- Wall Mount Rack
Relevance
- Relevance Question: List out all relevant fixlets for a Computer Group
- Action Parameter to define IP Address
I Want to ...
- Know How BigFix works
- View information about BigFix managed computers
- Install the BigFix client on Windows
- Install the BigFix clinet on Windows from the DMZ or Outside the Network
- Install the BigFix client on OS X
- Install the BigFix clinet on OS X from the DMZ or Outside the Network
- Install the BigFix client on Linux
- Install the BigFix clinet on Linux from the DMZ or Outside the Network
- Create a Patching Baseline for the Citrix Servers
- Create a Patching Baseline for the Monthly Microsoft patches
- Change the Owner property for the BigFix Client
- Parse CSV with Regular Expressions and Tuples
- Deploy the BigFix Client to a number of remote computers
Content
Documentation
- List of All Client and Server Settings
- List of all current Client Settings as of 2/27/2016 Version <= 9.5
- Videos related to IBM BigFix
- Managing VM managers
- DSA replication is failing with named instance databases
- IBM BigFix 9.5 Documents in PDF
- Strings from BESRelay.exe that look like settings
- Strings from BESClient.exe that look like settings
- BFI RESTAPI Documentation
- BigFix Docs in PDF
Diagnostics
Utilities
Logging Documentation
Service Now Items of Note
- TASK1086082 - Requested access to Server 2012R2 ISO
- RITM0819411/REQ0812148 - Requested DMZ Server for BigFix/Service-Now Test/Dev
- Tools to interact with BigFix SOAP API
- FOrums.BigFix.com posting about ServiceNow
OS Deployment
REST API Content
- https://forum.bigfix.com/t/baselines-and-restapi-what-gives/11940
- https://forum.bigfix.com/t/example-in-vb-net-soap-api/12051
- Relevance to export all properties for all computers
IBM AIX Support in BigFix
Custom Content Creation
- Make-Prefetch now supports both Python 2 & 3
- Creating Parameterized Fixlet's
- How can I write an action statement that provides information about the operator who runs a task or fixlet on the client
- Using WOW64 Redirection
- Detect and Remove malicious eDell root certificate
Interesting items
- Is today the 2nd Tuesday of the month?
- Undelete Actions via SQL commands
- Customizing the Self-Service Portal
- SQL Analysis Properties
- if exists (domain users(names of logged on users))then full names of domain users(names of logged on users)else if exists (users(names of logged on users)) then "local account" else "none"
- File being Uploaded never shows Completed Status in Software Distribution dashboard
- Internet Facing Relays
- Need a Secure way to prompt a console user for a password
- BigFix OS Deployment Content
- Enable Custom Site to bypass a Client Lock State
- Terminal Services Recommended Settings
- BitLocker Analysis
- BitLocker Events from Logs
- Adjust Console Timeout settings to prevent Error 28's
- Get the current Action Name while running the Action
- Download Folder Path
- POSTMan
- Tracking Logins for Local Administrator Accounts
- Configure Preference for IP v4
- Is there a way to externally tell if an action is running?
Client Installation Information
- Can I automatically assign a Relay when installing a client
- Deploying clients that won't be able to talk to the IEM server
- Forum post about Mac Client installation issues
- Can I automatically assign a TEM Client a particular relay at installation time?
Client Configuration Content
Creating Custom Content
- exists keys "HKEY_LOCAL_MACHINE\SOFTWARE\Sassafras\Install\KeyAccess" of (x64 registries; x32 registries)
- Automatically creating patches using BigFix Fixlets - VERY Cool Concept!
- Omitting HTML tag from BES Fixlet Descriptions
- Interesting Ideas for Fixlets
- SavingThrow Anti-ADWare
- Dual Monitor Relevance - Still needs work. Doesn't report correct results on my Lenovo AIO.
- Install IEM OSD on Air Gapped IEM for PIN
- IEM Tickets to Remember
- Notes on intentionally Air-Gapping an IEM Installation
- IBM Endpoint Manager Relevance Language Information
- IBM Endpoint Manager Action Information
- IBM Endpoint Manager Web Reports
- Software Installation Information
- Disaster Server Architecture
- IBM Endpoint Manager API Scripting
- https://forum.bigfix.com/t/microsoft-patch-tuesday-detail-summary-report/6786
- https://forum.bigfix.com/t/relevance-question-sum-of-applicable-computer-counts-and-group-membership/12245
- Software Installation Documentation
- Relevance Cheat Sheet
- RESTAPI: Generate uninstall tasks for all MSI applications on target computer - Windows
- TEM Client Deployment in a VDI Cloned pool infrastructure
- Allow non-Master Operators to stop other actions
- Retrieve information for a Removed Computer before the database is purged
- Enumerate Multiple Monitors
- Gather files from endpoints
- Connecting your IEM Environment to Bigfix.Me
- IEM Tickets to Remember
- Forum post about Mac Client installation issues
- Notes on intentionally Air-Gapping an IEM Installation
- IBM Endpoint Manager Relevance Language Information
- IBM Endpoint Manager Action Information
- IBM Endpoint Manager Web Reports
- Software Installation Information
- Disaster Server Architecture
- IBM Endpoint Manager API Scripting
- https://forum.bigfix.com/t/microsoft-patch-tuesday-detail-summary-report/6786
- https://forum.bigfix.com/t/relevance-question-sum-of-applicable-computer-counts-and-group-membership/12245
- Software Installation Documentation
- RESTAPI: Generate uninstall tasks for all MSI applications on target computer - Windows
- TEM Client Deployment in a VDI Cloned pool infrastructure
- Allow non-Master Operators to stop other actions
- Retrieve information for a Removed Computer before the database is purged
Documentation
- FTP Server with the BigFix 9.2 Documentation in PDF format
- JGStew keeps a page with Documentation links on it
- Logged On User Information
- IBM Endpoint Manager Version 9.0 - DOCUMENTATION
- REST API Documentation
- Inspector Documentation
- Bigfix.me Inspector Guide
- IEM Video on YouTube
- Upload and Archive Manager
- Baseline Information
- Fixlet Authoring
- Recommended Client Settings from JGStew
- Creating Custom Dashboards for Bigfix
- Action Object Documentation
- Schedule-able Compliance by Computer Web Reports
- RedHat Patching Documentation
- MsiExec.exe and InstMsi.exe Error Messages
- BigFix Server Automation Documentation
- Server Disk Performance
- Decompress Utility
- Relay Autoselection Failsafe Controls
- How do I turn on more detailed logging for the TEM Client?
- How do I turn on detailed message debug logging for the non-Windows TEM Client?
- Relays.dat Parser
- FORUM: Windows or Linux Relay
IEM Component Articles
Tools that might be useful
- Microsoft ORCA.exe
- Netwrix Change Audit Tool for Windows Server
- A quick look at the IBM endpoint Security Strategy
- Yara Malware tool
Pages about odd information
- Null Session Shares (not a good idea!)
- A quick look at the IBM Endpoint Security Strategy
