In the Microsoft Platform driver, we have these two parameters:
- (A) Days Since Last Reboot
- (B) Days Since Last Update (assuming this refers to the last update/patch being installed)
In the alarm template, is it possible to raise an alarm when A > B?
If not, can this be achieved using a Correlation rule or even Automation Script?
The end goal is we want to know PCs that haven't been rebooted since the last installation of updates/patches. Any other suggestions to achieve this would be much appreciated.
Thanks.
Hi Trong,
It's not immediately possible to configure this in an alarm template. You have conditional monitoring available in an alarm template (see: Using conditions in an alarm template | DataMiner Docs), but you can only compare with a fixed value, not against the value of another parameter...
I guess the best approach would be to create an Automation Script checking and comparing those days of all your Microsoft elements. You could execute this e.g. every day and send an email whenever this situation is being detected.
I was checking our internal IT DMS, and I do see that sometimes updates are being installed without reboots. Not sure if you had somewhere negative experiences with this, but it's not necessary to reboot for each update. It probably depends on the type of update... So, this might detect a lot of extra reboots you would need to do...
Bert