Report for tPoly based on Task

[Pablo Llorente]

Hello,

First of all, sorry if this question is a basic quesiton, but even being using Altiris for many years ago, is something that was never clear for us.

When we create a Policy based on a task execution, we normally check the Report  "Software Compliance Details by Managed Delivery Policy". 

For example, we have a policy that enables the Bitlocker PIN:

Thar report shows a 91% of Compliant:

But on the other hand, when we check the Report for the own task (the same one used to check the output log, although the "save output option is disable i should work If Im not wrong):

SELECT
vc.name [Computer Name]
,vi.Name [Task Name]
,vcs.Model
,REPLACE(REPLACE(topv.Value,'<string>',''),'</string>','') [Script Output] --<string>Name 20X2S4AX1Q </string>
,ts.Name [Task Server]
,ti.StartTime, ti.EndTime
,CAST((ti.EndTime-ti.StartTime) as time(0)) [Total Run Time]
,case tis.InstanceStatus
	when 0 then 'Queued'
	when 1 then 'Running'
	when 2 then 'Completed'
	when 3 then 'Failed'
	when 4 then 'Stop Requested'
end [Status]
,tir.Result [Return Code]
,vc.[OS Name]
,vc.[User]


FROM vcomputer vc
left join Inv_Client_Task_Resources ctr on ctr._ResourceGuid = vc.Guid
left join vcomputer ts on ts.Guid = ctr.ClientTaskServerGuid
left join TaskInstances ti on ti.ResourceGuid = vc.Guid AND ti.InstanceType = 1
left join ItemVersions itv on itv.VersionGuid = ti.TaskVersionGuid
left join vitem vi on vi.Guid = itv.ItemGuid
left join TaskInstanceStatus tis on tis.TaskInstanceGuid = ti.TaskInstanceGuid
left join TaskInstanceResults tir on tir.TaskInstanceGuid = ti.TaskInstanceGuid
left join TaskOutputPropertyValue topv on topv.TaskInstanceGuid = ti.TaskInstanceGuid
left join dbo.vHWComputerSystem vcs on vc.Guid = vcs._ResourceGuid
WHERE --(topv.name != '@Exception' OR TOPV.NAME IS NULL) AND

vc.name like '%' --<<--- NAME OF COMPUTER TO BE CHECKED

AND vi.Name like 'UNK - Bitlocker With Pin - Enable' --<<--- NAME OF TASK

--AND ts.Name like '%' --<<--- NAME OF TASK SERVER

ORDER BY ti.EndTime DESC

we only get 145 executions:

How we could check a reprot with that task execution history? 

Thanks a lot in advance for your advices.

[Igor Perevozchikov]

Hello

1. I believe that task has enabled "Save script output with task status" 

2. We don't see same amount 698 computers in custom report output and see there only 145 computers records for this task, probably because these task instances were purged and not available in database.
Please review what settings are set for task instances purging.

Best regards,
IP.

[Igor Perevozchikov]

Hello Pablo Llorente!

Also could you please try to execute your SQL query without join to vHWComputerSystem? Is there same amount of results as previously?

SELECT

vc.Name [Computer Name]

,vi.Name [Task Name]

--,vcs.Model

,REPLACE(REPLACE(topv.Value,'<string>',''),'</string>','') [Script Output] --<string>Name 20X2S4AX1Q </string>

,ts.Name [Task Server]

,ti.StartTime, ti.EndTime

,CAST((ti.EndTime-ti.StartTime) as time(0)) [Total Run Time]

,case tis.InstanceStatus

when 0 then 'Queued'

when 1 then 'Running'

when 2 then 'Completed'

when 3 then 'Failed'

when 4 then 'Stop Requested'

end [Status]

,tir.Result [Return Code]

,vc.[OS Name]

,vc.[User]

FROM vComputer vc

left join Inv_Client_Task_Resources ctr on ctr._ResourceGuid = vc.Guid

left join vComputer ts on ts.Guid = ctr.ClientTaskServerGuid

left join TaskInstances ti on ti.ResourceGuid = vc.Guid AND ti.InstanceType = 1

left join ItemVersions itv on itv.VersionGuid = ti.TaskVersionGuid

left join vItem vi on vi.Guid = itv.ItemGuid

left join TaskInstanceStatus tis on tis.TaskInstanceGuid = ti.TaskInstanceGuid

left join TaskInstanceResults tir on tir.TaskInstanceGuid = ti.TaskInstanceGuid

left join TaskOutputPropertyValue topv on topv.TaskInstanceGuid = ti.TaskInstanceGuid

--left join dbo.vHWComputerSystem vcs on vc.Guid = vcs._ResourceGuid

WHERE --(topv.name != '@Exception' OR TOPV.NAME IS NULL) AND

vc.Name like '%' --<<--- NAME OF COMPUTER TO BE CHECKED

AND vi.Name like 'UNK - Bitlocker With Pin - Enable' --<<--- NAME OF TASK

--AND ts.Name like '%' --<<--- NAME OF TASK SERVER

ORDER BY ti.EndTime DESC

Best regards,
IP.

[Pablo Llorente]

Hello Igor,

Same results without using that table.

Regarding your first answer, the "Save script output with task status" is
not enabled and it was never enabled. I guess that is for that because we
dont have any result in that column... but as we have a left join, even if
no records in table *TaskOutputPropertyValue *we should get the task
executions given by:

left join TaskInstanceStatus tis on tis.TaskInstanceGuid =
ti.TaskInstanceGuid
left join TaskInstanceResults tir on tir.TaskInstanceGuid =
ti.TaskInstanceGuid

On the other hand, maybe you are right, and our purging maintenance,
scheduled weekly, is the cause of the missing entries in the query.

Best Regards / Saludos
___________________________

PABLO LLORENTE ABAD
EMEA Workplace Services , Workplace Specialist

Julian Camarillo 29/31, 2nd floor
Madrid , Spain
Mobile [phone]
*[e-mail] <[e-mail]>**
<http: www.holcim.com/="">*
*www.holcim.com <http: www.holcim.com/="">*

Follow us on Facebook <https: www.facebook.com/lafargeholcimitemea/=""> |
Twitter <https: twitter.com/lhitemea=""> | LinkedIn
<https: www.linkedin.com/company/lafargeholcimitemea/="">

*To visit our Workplace Connect site click here
<https: connect.lafargeholcim.com/emea-digital-center/functions/it-security/emea-workplace-services="">*

This email is confidential and intended only for the use of the above named
addressee. If you have received this email in error, please delete it
immediately and notify us by email or telephone.


On Fri, Mar 8, 2024 at 11:42 AM Igor Perevozchikov via Broadcom <
[e-mail]> wrote:

> Hello Pablo Llorente! Also could you please try to execute your SQL query
> without join to vHWComputerSystem? Is there same amount of results as...
> -posted to the "Client Management Suite" community
> [image: Broadcom] <https: community.broadcom.com="">
> Client Management Suite
> <https: community.broadcom.com/symantecenterprise/communities/community-home/digestviewer?communitykey="ef59d715-7ea1-41c6-97f3-dd1bcc10d0c3">
> Post New Message <[e-mail]>
> Re: Report for tPoly based on Task
> <https: community.broadcom.com/symantecenterprise/discussion/report-for-tpoly-based-on-task#bmc78b1943-c5b0-4b4d-9a61-018e1da62e09="">
> Reply to Group
> <bro[e-mail]?subject=re:+report+for+tpoly+based+on+task> Reply
> to Sender
> <https: community.broadcom.com/symantecenterprise/communities/all-discussions/postreply?messagekey="c78b1943-c5b0-4b4d-9a61-018e1da62e09&ListKey=8bad3270-f680-4911-8051-16d37e6be521&SenderKey=a5296633-d529-450c-96ec-c4a968a6e9b1">
> [image: Igor Perevozchikov]
> <https: community.broadcom.com/network/members/profile?userkey="a5296633-d529-450c-96ec-c4a968a6e9b1">
> Mar 8, 2024 5:43 AM
> Igor Perevozchikov
> <https: community.broadcom.com/network/members/profile?userkey="a5296633-d529-450c-96ec-c4a968a6e9b1">
>
> Hello Pablo Llorente
> <https: community.broadcom.com/symantecenterprise/network/members/profile?userkey="278d1fe0-fb09-485d-bc03-377654f3d842">
> !
>
> Also could you please try to execute your SQL query without join to
> vHWComputerSystem? Is there same amount of results as previously?
>
> SELECT
> vc.Name [Computer Name]
> ,vi.Name [Task Name]
> *--,vcs.Model*
> ,REPLACE(REPLACE(topv.Value,'<string>',''),'</string>','') [Script
> Output] --<string>Name 20X2S4AX1Q </string>
> ,ts.Name [Task Server]
> ,ti.StartTime, ti.EndTime
> ,CAST((ti.EndTime-ti.StartTime) as time(0)) [Total Run Time]
> ,case tis.InstanceStatus
> when 0 then 'Queued'
> when 1 then 'Running'
> when 2 then 'Completed'
> when 3 then 'Failed'
> when 4 then 'Stop Requested'
> end [Status]
> ,tir.Result [Return Code]
> ,vc.[OS Name]
> ,vc.[User]
> FROM vComputer vc
> left join Inv_Client_Task_Resources ctr on ctr._ResourceGuid = vc.Guid
> left join vComputer ts on ts.Guid = ctr.ClientTaskServerGuid
> left join TaskInstances ti on ti.ResourceGuid = vc.Guid AND
> ti.InstanceType = 1
> left join ItemVersions itv on itv.VersionGuid = ti.TaskVersionGuid
> left join vItem vi on vi.Guid = itv.ItemGuid
> left join TaskInstanceStatus tis on tis.TaskInstanceGuid =
> ti.TaskInstanceGuid
> left join TaskInstanceResults tir on tir.TaskInstanceGuid =
> ti.TaskInstanceGuid
> left join TaskOutputPropertyValue topv on topv.TaskInstanceGuid =
> ti.TaskInstanceGuid
> *--left join dbo.vHWComputerSystem vcs on vc.Guid = vcs._ResourceGuid*
> WHERE --(topv.name != '@Exception' OR TOPV.NAME IS NULL) AND
> vc.Name like '%' --<<--- NAME OF COMPUTER TO BE CHECKED
> AND vi.Name like 'UNK - Bitlocker With Pin - Enable' --<<--- NAME OF TASK
> --AND ts.Name like '%' --<<--- NAME OF TASK SERVER
> ORDER BY ti.EndTime DESC
> Best regards,
> IP.
> *Reply to Group Online
> <https: community.broadcom.com/symantecenterprise/communities/all-discussions/postreply?messagekey="c78b1943-c5b0-4b4d-9a61-018e1da62e09&ListKey=8bad3270-f680-4911-8051-16d37e6be521">*
> *Reply to Group via Email
> <bro[e-mail]?subject=re:+report+for+tpoly+based+on+task>*
> *View Thread
> <https: community.broadcom.com/symantecenterprise/discussion/report-for-tpoly-based-on-task#bmc78b1943-c5b0-4b4d-9a61-018e1da62e09="">*
> *Recommend
> <https: community.broadcom.com:443/symantecenterprise/discussion/report-for-tpoly-based-on-task?messagekey="c78b1943-c5b0-4b4d-9a61-018e1da62e09&cmd=rate&cmdarg=add#bmc78b1943-c5b0-4b4d-9a61-018e1da62e09">*
> *Forward
> <https: community.broadcom.com/symantecenterprise/communities/all-discussions/forwardmessages?messagekey="c78b1943-c5b0-4b4d-9a61-018e1da62e09&ListKey=8bad3270-f680-4911-8051-16d37e6be521">*
> *Flag as Inappropriate
> <https: community.broadcom.com/symantecenterprise/discussion/report-for-tpoly-based-on-task?markappropriate="c78b1943-c5b0-4b4d-9a61-018e1da62e09#bmc78b1943-c5b0-4b4d-9a61-018e1da62e09">*
>
> -------------------------------------------
> Original Message:
> Sent: Mar 08, 2024 02:56 AM
> From: Pablo Llorente
> Subject: Report for tPoly based on Task
>
> Hello,
>
> First of all, sorry if this question is a basic quesiton, but even being
> using Altiris for many years ago, is something that was never clear for us.
>
> When we create a Policy based on a task execution, we normally check the
> Report "Software Compliance Details by Managed Delivery Policy".
>
> For example, we have a policy that enables the Bitlocker PIN:
>
> Thar report shows a 91% of Compliant:
>
> But on the other hand, when we check the Report for the own task (the same
> one used to check the output log, although the "save output option is
> disable i should work If Im not wrong):
>
> SELECTvc.name [Computer Name],vi.Name [Task Name],vcs.Model,REPLACE(REPLACE(topv.Value,'<string>',''),'</string>','') [Script Output] --<string>Name 20X2S4AX1Q </string>,ts.Name [Task Server],ti.StartTime, ti.EndTime,CAST((ti.EndTime-ti.StartTime) as time(0)) [Total Run Time],case tis.InstanceStatus when 0 then 'Queued' when 1 then 'Running' when 2 then 'Completed' when
> 3 then 'Failed' when 4 then 'Stop Requested'end [Status],tir.Result [Return Code],vc.[OS Name],vc.[User]FROM vcomputer vcleft join Inv_Client_Task_Resources ctr on ctr._ResourceGuid = vc.Guidleft join vcomputer ts on ts.Guid = ctr.ClientTaskServerGuidleft join TaskInstances ti on ti.ResourceGuid = vc.Guid AND ti.InstanceType = 1left join ItemVersions itv on itv.VersionGuid = ti.TaskVersionGuidleft join vitem vi on vi.Guid = itv.ItemGuidleft join TaskInstanceStatus tis on tis.TaskInstanceGuid = ti.TaskInstanceGuidleft join TaskInstanceResults tir on tir.TaskInstanceGuid = ti.TaskInstanceGuidleft join TaskOutputPropertyValue topv on topv.TaskInstanceGuid = ti.TaskInstanceGuidleft join dbo.vHWComputerSystem vcs on vc.Guid = vcs._ResourceGuidWHERE --(topv.name != '@Exception' OR TOPV.NAME IS NULL) ANDvc.name like '%' --<<--- NAME OF COMPUTER TO BE CHECKEDAND vi.Name like 'UNK - Bitlocker With Pin - Enable' --<<--- NAME OF TASK--AND ts.Name like '%' --<<--- NAME OF
> TASK SERVERORDER BY ti.EndTime DESC
>
> we only get 145 executions:
>
> How we could check a reprot with that task execution history?
>
> Thanks a lot in advance for your advices.
>
>
>
>
> You are subscribed to "Client Management Suite" as
> [e-mail]. To change your subscriptions, go to My
> Subscriptions
> <http: community.broadcom.com/preferences?section="Subscriptions">. To
> unsubscribe from this community discussion, go to Unsubscribe
> <http: community.broadcom.com/higherlogic/egroups/unsubscribe.aspx?userkey="278d1fe0-fb09-485d-bc03-377654f3d842&sKey=KeyRemoved&GroupKey=8bad3270-f680-4911-8051-16d37e6be521">.
>
>
> Copyright © 2005-2023 Broadcom. All Rights Reserved. The term "Broadcom"
> refers to Broadcom Inc. and/or its subsidiaries.
>
> Hosted by Higher Logic, LLC on the behalf of Broadcom - Privacy Policy
> <https: www.broadcom.com/company/legal/privacy-policy=""> | Cookie Policy
> <https: www.higherlogic.com/legal/privacy=""> | Supply Chain Transparency
> <https: www.broadcom.com/company/citizenship/governance-and-ethics#supply="">
> | Terms of Use <http: termsandconditions="">
>