Skip to main content

Unapproved Patches Count Audit

Summary

The script creates an urgent ticket for ProVal if the number of unapproved patches changes by a certain percentage within a day or week. The threshold for this change can be set in the system properties, which are detailed later in this document.

Sample Run

It is a client script and suggested to run once per day.
Image1

Variables

NameDescription
patch_denial_daily_threshold_percentageThreshold in percentage to create a ticket if the difference between today's and yesterday's unapproved patch percentage exceeds this value. Gathered from the patch_denial_daily_threshold_percentage property.
patch_denial_weekly_threshold_percentageThreshold in percentage to create a ticket if the difference between today's and last week's unapproved patch percentage exceeds this value. Gathered from the patch_denial_weekly_threshold_percentage property.
provalAlertsEmailProVal's email address. Gathered from the ProVal_Alerts_Email_Address property.
currentUnapprovedDetails of the currently unapproved patches.
UnapprovedNumber of currently unapproved patches.
TotalTotal number of patches at the time of collection.
UnapprovedPercentagePercentage of unapproved patches out of the total number of patches.
ActiveApprovalPoliciesTotal number of currently active approval policies.
yesterdayUnapprovedNumber of patches that were unapproved yesterday.
yesterdayTotalTotal number of patches from yesterday.
yesterdayUnapprovedPercentagePercentage of unapproved patches from yesterday.
yesterdayActiveApprovalPoliciesTotal number of approval policies that were active yesterday.
lastWeekUnapprovedNumber of patches that were unapproved last week.
lastWeekTotalTotal number of patches from last week.
lastWeekUnapprovedPercentagePercentage of unapproved patches from last week.
lastWeekActiveApprovalPoliciesTotal number of approval policies that were active last week.
yesterdayIncrementComparisionComparison of the increment in unapproved patches percentage from yesterday.
yesterdayDecrementComparisionComparison of the decrement in unapproved patches percentage from yesterday.
weeklyIncrementComparisionComparison of the increment in unapproved patches percentage from last week.
weeklyDecrementComparisionComparison of the decrement in unapproved patches percentage from last week.
weeklyTicketGeneratedA variable used to reset the week after creating a weekly ticket. A weekly ticket will be created as soon as the weekly threshold has been breached instead of waiting for the full 7 days.

Properties

NameDefaultRequiredDescription
patch_denial_daily_threshold_percentage10TrueThreshold in percentage to create a ticket if the difference between today's and yesterday's unapproved patch percentage exceeds this value.
patch_denial_weekly_threshold_percentage20TrueThreshold in percentage to create a ticket if the difference between today's and last week's unapproved patch percentage exceeds this value.
ProVal_Alerts_Email_Addressalerts@provaltech.comTrueProVal's email address

Script States

NameDescription
yesterdayActiveApprovalPoliciesTotal number of approval policies that were active yesterday.
yesterdayTotalTotal number of patches from yesterday.
yesterdayUnapprovedNumber of patches that were unapproved yesterday.
yesterdayUnapprovedPercentagePercentage of unapproved patches from yesterday.
lastWeekActiveApprovalPoliciesTotal number of approval policies that were active last week.
lastWeekTotalTotal number of patches from last week.
lastWeekUnapprovedNumber of patches that were unapproved last week.
lastWeekUnapprovedPercentagePercentage of unapproved patches from last week.
lastWeekUpdateDateDate of the last week's update.

Note: The script states can not be viewed from any computer as they will not be associated with any agent.

Output

  • Script log
  • Email

Sample AutoTask Ticket

One day threshold violation:
SampleYesterdayTicket

Week's threshold violation:
SampleLastWeekTicket

The numbers shown in the sample tickets are for demonstration purposes only and will be different and more practical in the actual tickets.