Patch Management domain
The Patch Management domain contains various information related to patch management, such as:
- The number of patches installed
- The number of patches missing
- The number of servers audited
- Data for missing patches
You can use this information to build your own custom Patch Management reports using your own reporting tool.
This topic contains the following sections:
Patch Management domain entity-relationship diagram (ERD)
The following figure provides the ERD for the Patch Management domain. It shows the relationships between the dimension, fact, bridge, and generic tables.
To view the detailed expressions that allow you to join tables, you can download the Patch BDSSA BI Reporting Model Schema Definition.html file.
To understand the relationships between tables, click the ERD image below and then click the magnifying glass icon to zoom in to the image.
Tables in the Patch Management domain
The following tables comprise the Patch Management domain:
- Dimension tables - Describe the properties of an object that are subject to change. These tables are prefixed with D_, for example, D_JOB.
- Bridge tables - Are used to link two tables. These tables are prefixed with B_, for example, B_BLGROUP_PATCH.
- Fact tables - Contain factual information that remains constant and is required for reporting. These tables are prefixed with F_, for example, F_JOB_RUN.
- Generic tables - Are used in BMC Server Automation. These tables are not prefixed with any alphabet, for example, BL_PATCH_JOB_RES_SERVER_CNT.
Contains job details such as the name, description, and type of job, as well as the dates on which the jobs were created or modified.
Note: BL_SITE is also referenced in the ERD as JOB_SITE.
Contains device details for the job, such as the name and description of a server, the OS release/version, and so on.
Note: D_SERVER is also referenced in the ERD as D_PLATFORM.
Contains information about the software hotfix, such as the patch name, file name, file size, name of vendor, download URL, posted date.
Contains information about the windows bulletin, such as the bulletin name, name of vendor, CVE ID, IAVA ID, and posted date.
Contains information about the folder group where the job is stored, such as the group name, the group type (Server, Job, Depot), the fully qualified path to the group, and the parent group details.
Note: D_BLGROUP is referenced in the ERD as D_SMART_BLGROUP.
Contains information about the depot objects for each object types, such as name, descriptions, date (created/modified), object type (patch/Audit/Compliance...) and so on.
Note: D_DEPOT_OBJECT is referenced in the ERD as PATCH_D_DEPOT_OBJECT and PATCH_D_DEPOT_OBJECT_V2.
Contains details specific to blgroup and server, such as server ID and group ID.
Contains details specific to blgroup and depot objects, such as depot object ID and group ID.
Contains details specific to jobs and groups such as job history ID and group ID. It also indicates if
Contains details for the job run, such as the job type and the status of the run (completed, error, warning, or cancelled).
Contains details for the patch counts for installed patch on machines and missing patch on machines.
Contains details for the patch counts for the installed patch and a missing patch.
Contains details for the patch result for each server, such as (missing/installed), vendor reason and status of the patch, dates (create/end), and so on.
Contains details for the patch job result, such as total count and status for each patch object types.
Note: BL_PATCH_JOB_RES_SERVER_CNT is referenced in the ERD as XPATCH_JOB_RES_SERVER_CNT.
Built-in Patch Management views
BMC Decision Support for Server Automation provides the following built-in views.
BMC recommends that you apply appropriate filters (such as date duration or bl_site_id) while querying the views. You can also apply other filters based on your requirements. Filtering the data improves performance by decreasing the amount of data being fetched, thereby minimizing the time required to process the views.
|View Name/Description||Columns in the view||Example|
Shows detailed information about each patch that is installed or missing on a server for a given patch type.
Information is grouped by the patch name.
Provides a summarized view of the installed, missing, and total patch count and patch compliance of a server against a policy over a selected time interval.