Unsupported content

 

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Patch Management domain

The Patch Management domain contains various information related to patch management, such as:

  • The number of patches installed
  • The number of patches missing
  • The number of servers audited
  • Data for missing patches

You can use this information to build your own custom Patch Management reports using your own reporting tool.

This topic contains the following sections:

Patch Management domain entity-relationship diagram (ERD)

The following figure provides the ERD for the Patch Management domain. It shows the relationships between the dimension, fact, bridge, and generic tables.

To view the detailed expressions that allow you to join tables, you can download the Patch BDSSA BI Reporting Model Schema Definition.html file.

Tip

To understand the relationships between tables, click the ERD image below and then click the magnifying glass icon to zoom in to the image.



Tables in the Patch Management domain

The following tables comprise the Patch Management domain:

  • Dimension tables - Describe the properties of an object that are subject to change. These tables are prefixed with D_, for example, D_JOB.
  • Bridge tables - Are used to link two tables. These tables are prefixed with B_, for example, B_BLGROUP_PATCH.
  • Fact tables - Contain factual information that remains constant and is required for reporting. These tables are prefixed with F_, for example, F_JOB_RUN.
  • Generic tables - Are used in BMC Server Automation. These tables are not prefixed with any alphabet, for example, BL_PATCH_JOB_RES_SERVER_CNT.

Dimension tables

Table Name/DescriptionERD

D_JOB

Contains job details such as the name, description, and type of job, as well as the dates on which the jobs were created or modified.

Note: BL_SITE  is also referenced in the ERD as JOB_SITE.

D_SERVER

Contains device details for the job, such as the name and description of a server, the OS release/version, and so on.

Note: D_SERVER  is also referenced in the ERD as D_PLATFORM.

D_DEPOT_SOFTWARE_HOTFIX

Contains information about the software hotfix, such as the patch name, file name, file size, name of vendor, download URL, posted date.

D_DEPOT_SOFTWARE_WIN_BULLETIN

Contains information about the windows bulletin, such as the bulletin name, name of vendor, CVE ID, IAVA ID, and posted date.

D_BLGROUP

Contains information about the folder group where the job is stored, such as the group name, the group type (Server, Job, Depot), the fully qualified path to the group, and the parent group details.

Note: D_BLGROUP is referenced in the ERD as D_SMART_BLGROUP.

D_DEPOT_OBJECT

Contains information about the depot objects for each object types, such as name, descriptions, date (created/modified), object type (patch/Audit/Compliance...) and so on.

Note: D_DEPOT_OBJECT is referenced in the ERD as PATCH_D_DEPOT_OBJECT and PATCH_D_DEPOT_OBJECT_V2.

Bridge tables

Table Name/DescriptionERD

B_BLGROUP_SERVER

Contains details specific to blgroup and server, such as server ID and group ID.

B_BLGROUP_PATCH

Contains details specific to blgroup and depot objects, such as depot object ID and group ID.

B_CATALOG_UPD_JOB_ASSOC

Contains details specific to jobs and groups such as job history ID and group ID. It also indicates if
a group is deleted or not.

Fact tables

Table Name/DescriptionERD

F_JOB_RUN

Contains details for the job run, such as the job type and the status of the run (completed, error, warning, or cancelled).

F_PATCH_ANALYSIS_PATCH_SMRY

Contains details for the patch counts for installed patch on machines and missing patch on machines.

F_PATCH_ANALYSIS_RESULT_SMRY

Contains details for the patch counts for the installed patch and a missing patch.

F_PATCH_ANALYSIS_RESULT_DTL

Contains details for the patch result for each server, such as (missing/installed), vendor reason and status of the patch, dates (create/end), and so on.

Generic tables

Table Name/DescriptionERD

BL_PATCH_JOB_RES_SERVER_CNT

Contains details for the patch job result, such as total count and status for each patch object types.

Note: BL_PATCH_JOB_RES_SERVER_CNT is referenced in the ERD as XPATCH_JOB_RES_SERVER_CNT.

Built-in Patch Management views 

BMC Decision Support for Server Automation provides the following built-in views.

Recommendation

BMC recommends that you apply appropriate filters (such as date duration or bl_site_id) while querying the views. You can also apply other filters based on your requirements. Filtering the data improves performance by decreasing the amount of data being fetched, thereby minimizing the time required to process the views.

View Name/DescriptionColumns in the viewExample

VO_PATCH_DETAILS_WINDOWS

VO_PATCH_DETAILS_SOLARIS

VO_PATCH_DETAILS_LINUX

 VO_PATCH_DETAILS_AIX

Shows detailed information about each patch that is installed or missing on a server for a given patch type.

Information is grouped by the patch name.

  • BL_SITE_ID
  • PATCH_TYPE
  • PATCH_HIST_ID
  • PATCH_NAME
  • GROUP_HIST_ID
  • PATCH_CATALOG_GROUP
  • PATCH_CATALOG_NAME
  • SERVER_HIST_ID
  • SERVER_NAME
  • ROLE_HIST_ID
  • USER_HIST_ID
  • JOB_RUN_HIST_ID
  • JOB_RUN_START_TIME
  • JOB_RUN_END_TIME
  • JOB_HIST_ID
  • PATCH_ANALYSIS_POLICY
  • PATCH_STATUS
  • OS_NAME

Select * from vo_patch_details_windows
where job_run_start_time between
"dd/mm/yyyy" and "dd/mm/yyy" and bl_site_id = 1

VO_PATCH_SUMMARY_SERVER 

Provides a summarized view of the installed, missing, and total patch count and patch compliance of a server against a policy over a selected time interval.

  • BL_SITE_ID
  • PATCH_CATALOG_GROUP
  • PATCH_CATALOG_NAME
  • JOB_ID
  • JOB_HIST_ID
  • POLICY_NAME
  • JOB_RUN_START_TIME
  • OS_NAME
  • SERVER_NAME
  • SERVER_ID
  • SERVER_HIST_ID
  • INSTALLED_PATCH_COUNT
  • MISSING_PATCH_COUNT
  • TOTAL_PATCH_COUNT
  • PERCENTAGE_PATCH_COMPLIANCE

Select * from
VO_PATCH_SUMMARY_SERVER where
os_name = 'Windows' and bl_site_id =3

Where to go from here

Job Activity domain

Compliance domain

Role Based Access Control (RBAC) domain

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Comments