SEPM 11 Report - Reboot Status Report

[Oscar Castaneda]

I would like to know if there is an out of the box report to indicate the reboot status of a computer to satisfy this alert:

(The Network Threat Protection component has a product patch to apply.) 

I would like to also schedule this report as well.

 

Thanks,

 

Oscar

[ℬrίαη]

There is no report you can schedule, however, if you go to Monitors >> Logs tab

set the Log type to Computer Status and click View Log, you can export these records into an Excel file and just do a filter on the column that contains the phrase you want and go from there. Pretty quick and easy but no automated report unfortunately.

[Go_Beavs]

If you go to Reports

• Report type: Computer Status
• Select a Report: Security Status Summary

This should have the 'Restart Required' field.  You can schedule this by clicking on the Scheduled Reports tab, then add and choose the same options this should be scheduled.  This information is also available, by default, on the home page, bottom left corner.

[ℬrίαη]

The issue I've run into with the Reports >> Scheduled reports is that they don't give a breakdown by PC, only an overview. Unless, I've missed another step....

[MDubya]

Hope this helps,

-Mike

[MDubya]

If you're running an MS SQL DB...

SELECT SEM_CLIENT.COMPUTER_NAME
FROM SEM_CLIENT,SEM_AGENT

WHERE SEM_AGENT.CURRENT_CLIENT_ID = SEM_CLIENT.CLIENT_ID and SEM_AGENT.REBOOT_REQUIRED = '1'

Order by SEM_CLIENT.COMPUTER_NAME

-Mike

[ℬrίαη]

Now that is much easier

[MDubya]

SELECT SEM_CLIENT.COMPUTER_NAME,REBOOT_REASON
FROM SEM_CLIENT,SEM_AGENT

WHERE SEM_AGENT.CURRENT_CLIENT_ID = SEM_CLIENT.CLIENT_ID and SEM_AGENT.REBOOT_REQUIRED = '1'

Order by SEM_CLIENT.COMPUTER_NAME

AVMAN = Antivirus
LUMAN = LiveUpdate
FW = Network Threat Protection
GUP = Group Update Provider
Reasons are as follows:
1 = Risk remediation to complete
2 = Product patch to apply
3 = Content download to apply

-Mike

Just tested, this code works for the embedded DB as well.

[MDubya]

Here we are filtering for just the requirement you stated above: NTP and "Product patch to apply".

SELECT SEM_CLIENT.COMPUTER_NAME,REBOOT_REASON
FROM SEM_CLIENT,SEM_AGENT

WHERE SEM_AGENT.CURRENT_CLIENT_ID = SEM_CLIENT.CLIENT_ID and SEM_AGENT.REBOOT_REQUIRED = '1' and SEM_AGENT.REBOOT_REASON = 'FW=2;'

Order by SEM_CLIENT.COMPUTER_NAME

-Mike

p.s. Can't help ya with scheduling this...

[Migration User]

thanks man for sharing the SQL script here.