Unapproved Patches Count Audit
Summary
The script creates an urgent ticket for ProVal if the number of unapproved patches changes by a certain percentage within a day or week. The threshold for this change can be set in the system properties, which are detailed later in this document.
Sample Run
It is a client script and suggested to run once per day.

Variables
| Name | Description | 
|---|---|
| patch_denial_daily_threshold_percentage | Threshold in percentage to create a ticket if the difference between today's and yesterday's unapproved patch percentage exceeds this value. Gathered from the patch_denial_daily_threshold_percentageproperty. | 
| patch_denial_weekly_threshold_percentage | Threshold in percentage to create a ticket if the difference between today's and last week's unapproved patch percentage exceeds this value. Gathered from the patch_denial_weekly_threshold_percentageproperty. | 
| provalAlertsEmail | ProVal's email address. Gathered from the ProVal_Alerts_Email_Addressproperty. | 
| currentUnapproved | Details of the currently unapproved patches. | 
| Unapproved | Number of currently unapproved patches. | 
| Total | Total number of patches at the time of collection. | 
| UnapprovedPercentage | Percentage of unapproved patches out of the total number of patches. | 
| ActiveApprovalPolicies | Total number of currently active approval policies. | 
| yesterdayUnapproved | Number of patches that were unapproved yesterday. | 
| yesterdayTotal | Total number of patches from yesterday. | 
| yesterdayUnapprovedPercentage | Percentage of unapproved patches from yesterday. | 
| yesterdayActiveApprovalPolicies | Total number of approval policies that were active yesterday. | 
| lastWeekUnapproved | Number of patches that were unapproved last week. | 
| lastWeekTotal | Total number of patches from last week. | 
| lastWeekUnapprovedPercentage | Percentage of unapproved patches from last week. | 
| lastWeekActiveApprovalPolicies | Total number of approval policies that were active last week. | 
| yesterdayIncrementComparision | Comparison of the increment in unapproved patches percentage from yesterday. | 
| yesterdayDecrementComparision | Comparison of the decrement in unapproved patches percentage from yesterday. | 
| weeklyIncrementComparision | Comparison of the increment in unapproved patches percentage from last week. | 
| weeklyDecrementComparision | Comparison of the decrement in unapproved patches percentage from last week. | 
| weeklyTicketGenerated | A variable used to reset the week after creating a weekly ticket. A weekly ticket will be created as soon as the weekly threshold has been breached instead of waiting for the full 7 days. | 
Properties
| Name | Default | Required | Description | 
|---|---|---|---|
| patch_denial_daily_threshold_percentage | 10 | True | Threshold in percentage to create a ticket if the difference between today's and yesterday's unapproved patch percentage exceeds this value. | 
| patch_denial_weekly_threshold_percentage | 20 | True | Threshold in percentage to create a ticket if the difference between today's and last week's unapproved patch percentage exceeds this value. | 
| ProVal_Alerts_Email_Address | alerts@provaltech.com | True | ProVal's email address | 
Script States
| Name | Description | 
|---|---|
| yesterdayActiveApprovalPolicies | Total number of approval policies that were active yesterday. | 
| yesterdayTotal | Total number of patches from yesterday. | 
| yesterdayUnapproved | Number of patches that were unapproved yesterday. | 
| yesterdayUnapprovedPercentage | Percentage of unapproved patches from yesterday. | 
| lastWeekActiveApprovalPolicies | Total number of approval policies that were active last week. | 
| lastWeekTotal | Total number of patches from last week. | 
| lastWeekUnapproved | Number of patches that were unapproved last week. | 
| lastWeekUnapprovedPercentage | Percentage of unapproved patches from last week. | 
| lastWeekUpdateDate | Date of the last week's update. | 
Note: The script states can not be viewed from any computer as they will not be associated with any agent.
Output
- Script log
Sample AutoTask Ticket
One day threshold violation:

Week's threshold violation:

The numbers shown in the sample tickets are for demonstration purposes only and will be different and more practical in the actual tickets.