Patching Job - Analysis Options for Microsoft Windows


A Patching Job checks the configuration of patches on specific servers according to the filters defined as part of the job definition.

You can select List and create an Include/Exclude list for specific patches through the Include-or-Exclude-Selection dialog box. You can specify the patches that you want to include or exclude, or you can specify a .txt file that contains a list of QNumbers for these patches. BMC recommends only adding those patches that you want to test against the target, to the include list, because adding additional patches to the include list might increase the time taken to analyze the target.

Note

During analysis, shavlik filters out patches that have been superseded by later patches and only displays the latest applicable patch as missing. However, shavlik does not filter the patches added to the include list and all patches in the include list will be tested against the target.

If you select Group, by default you select the entire catalog of patches. Use the check boxes under the Group option to include or exclude categories of patches. You must select at least one of the choices under Group. For example, select Security Patches and clear the other fields to analyze only security patches.

Tip

If you are not sure what to do, select Group, and then select Security Patches (Recommended) only.

Note

If you select the Group option, you are only allowed to use the exclude functionality from the Include-or-Exclude-Selection dialog box. To use the include functionality you must use the List option.

Field definitions

Security patches (Recommended)

Analyze patches that address security vulnerabilities. The Patching Job performs analysis against all patches in the patch catalog. Any security patch in the catalog that is found to be missing from the target being tested will show as missing in the Job Run Log.

Security tools

Analyze patches that prevent or clean up malicious software.

Non-security patches

Analyze performance-related fixes, fixes for known bugs, and hardware drivers.

Exclude Service Packs

(Optional) Select when you do not want to include service packs in the analysis results.

Where to go from here

Patching-Job-Remediation-Options

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*