Next Topic

Previous Topic

Patch Alert

The Patch Alerts page creates alerts for patch management events on managed machines. Alerts provide a simple set of typical parameters for setting up alarms quickly on a managed machine. Once defined, you can apply this alert immediately to any machine ID displayed on this page.

To Create a Patch Alert

  1. Check any of the last three checkboxes to perform their corresponding actions when a patch alarm is triggered for a machine ID.
    • Create Alarm - This is always checked. Patch alarms are enabled when a patch alert is defined on this page.
    • Create Ticket
    • Run Script after alarm.
    • Email Recipients
  2. Set additional email parameters.
  3. Set additional patch alert specific parameters.
  4. Check the machine IDs to apply the alert to.
  5. Click the Apply button.

To Cancel a Patch Alert

  1. Select the machine ID checkbox.
  2. Click the Clear button.

    The alert information listed next to the machine ID is removed.

Passing Alert Information to Emails and Scripts

The following variables are populated with information when an alert is triggered. These variables can be referenced by any email you send or script you run in response to the triggering of an alert.

Note: Changing this email alarm format changes the format for all patch alert emails.

Within an Email

Within a Script

Description

<at>

#at#

alert time

<bi>

#bi#

bulletin ID

<bl>

#bl#

new bulletin list

<fi>

#fi#

failed bulletin ID

<gr>

#gr#

group ID

<ic>

#ic#

invalid credential type

<id>

#id#

machine ID

<pl>

#pl#

new patch list

 

#subject#

subject text of the email message, if an email was sent in response to an alert

 

#body#

body text of the email message, if an email was sent in response to an alert

Create Alarm

The Create Alarm check box is always checked. This creates an alarm for the selected alert function.

Create Ticket

If checked a new ticket is generated at the same time the alarm is created and associated with the alarm.

After alert run select script on this machine ID

If checked, a script is run when an alert is triggered. You must click the select script link to choose a script to run. You can optionally direct the script to run on a specified range of machine IDs by clicking this machine ID link. These specified machine IDs do not have to match the machine ID that triggered the alert.

Email Recipients

If checked, alert emails are sent to the specified email addresses.

  • The email address of the currently logged in administrator displays in this field. It defaults from the System > Preferences.
  • Click Format Email to display the Format Alert Email popup window. This window enables you to format the display of emails generated by the system when an alarm is triggered.
  • If the Add to current list radio option is selected, when Apply is clicked alert settings are applied and the specified email addresses are added to selected machine IDs without removing previously assigned email addresses.
  • If the Replace list radio option is selected, when Apply is clicked alert settings are applied and the specified email addresses replace the existing email addresses assigned to machine IDs.
  • If Removed is clicked, all email addresses are removed from selected machine IDs without modifying any alert parameters.
  • Email is sent directly from the KServer to the email address specified in the alert. The SMTP service in IIS sends the email directly to the address specified. Set the From Address using the System > Configurete page.

Apply

Click Apply to apply alert parameters to selected machine IDs. Confirm the information has been applied correctly in the machine ID list.

Clear

Click Clear to remove all parameter settings from selected machine IDs.

Patch Alert Parameters

The system triggers an alarm whenever the system discovers one of three different patch alert conditions for a selected machine ID:

  • New patch is available
  • Patch install fails
  • Agent credential is invalid or missing

Select All/Unselect All

Click the Select All link to check all rows on the page. Click the Unselect All link to uncheck all rows on the page.

Check-in status

These icons indicate the agent check-in status of each managed machine:

Agent has checked in

Agent has not recently checked in

Agent has never checked in

Online but waiting for first audit to complete

The agent is online but remote control is disabled

Machine ID.Group ID

The list of Machine ID.Group IDs displayed is based on the Machine ID / Group ID filter and the machine groups the administrator is authorized to see using System > Group Access.

Path Missing

An alert is generated if the system discovers the Patch Location path for a patch is missing or incorrect.

Approval Policy Updated

An alert is generated if a new pending patch is added to one or more collections with an approval policy set and the new pending patch requires approval or denial from an administrator. See Patch Approval.

ATSE

The ATSE alarm / response code assigned to machine IDs:

  • A = Create Alarm
  • T = Create Ticket
  • S = Run Script
  • E = Email Recipients

Email Address

A comma separated list of email addresses where notifications are sent.

New Patch

If checked, an alarm is triggered when a new patch is available for this machine ID.

Install Failed

If checked, an alarm is triggered when a patch installation has failed for this machine ID.

Invalid Credential

If checked, an alarm is triggered when the credential is invalid for this machine ID.

Topic 2889: Send Feedback