Fixlets and tasks

The list and description of fixlets and tasks available in the BigFix console on the BigFix Scanner site.

Required configuration fixlets and tasks

There are four basic fixlets and tasks that are required to configure BigFix Scanner to collect all necessary data from the computers in your environment.

The scanner binaries and location of the binaries are changed to be aligned with BigFix. As the scanner is one of the BigFix Platform tools, it is located under the Bes Client directory \tool\scanner directory.

Table 1. Required configuration fixlets and tasks
Name Category Description
Activate Preview Features Scanner
This fixlet allows you to activate the preview features available in BigFix Scanner version 11.0.38.1.
Note: Activating the preview feature changes the scanner's behavior. Manually added exclusion directories that are introduced after activating the preview feature are not automatically transferred to the legacy scanner once the preview feature is deactivated, unless "Add Excluded Directories" fixlet is used. If you deactivate the preview feature, you need to manually reapply the exclusion.
Deactivate Preview Feature Scanner This task deactivates the already activated preview features.
Install or Upgrade Scanner Scanner

This task installs the scanner or upgrades it to the latest version on the specified endpoints. For more information, see: .

Analysis: Scanner Information

This task will move the Scanner to a new location:

<BigFix Enterprise>\BES Client\tools\scanner

/opt/BESClient/tools/scanner

All previous installations of Scanner will be removed during scanner upgrade, unless the Scanner instance was used by any non-HCL exploiter. There is a separate task “Cleanup Scanner Installations 11.0.0 (9.2.35) and older” that can be used to completely remove remaining Scanner instances installed outside of BigFix Client installation folders.

The fixlet has been updated to check on Unix-like library versioning.

The fixlet is used to install scanner on endpoints that has library versions as follows:

  • glibc.so.6 >= 2.17 (Symbol Version 2.17)
  • libstdc++ >= 6.0.19 (Symbol Version 3.4.19)
Install or Upgrade Scanner (9.2.35.0) (Superseded) Scanner

Use this task only when the operating system is no longer supported by the most recent version of the "Install or Upgrade Scanner." This task installs or upgrades the scanner to HCL Scanner 9.2.35.0000 (24/03/07) on the specified endpoints.

Introduced the ability to deploy version 9.2.35 on older systems.

The fixlet is provided to install scanner version 9.2.35 on end points those do not have library versioned as specified in the Install or Upgrade Scanner fixlet. The Install or Upgrade Scanner fixlet becomes irrelevant if Install or Upgrade Scanner (9.2.35.0) (Superseded) is used to install scanner successfully

Create Scanner Wrapper for Scanner version 11.0.0.0 or lower Scanner

Use this task to create a Scanner Wrapper on an endpoint.

The tasks ensures a backward compatibility of fixlets from version 11.0.1.0 or newer with older scanner installations.

Run this task once on every relevant endpoint. Repeat the task if required.

For more information, refer to Create Scanner Wrapper for Scanner.

Troubleshooting fixlets

There are several fixlets and tasks that can help you troubleshoot the most common issues and questions related to the application.

Table 2. Troubleshooting
Name Category Description
Edit Scanner Trace Settings Troubleshooting This task allows you to set debug traces for the scanner. If this task is relevant, it means that the scanner is installed on an endpoint. For more information, see: Changing scanner trace settings.

Trace Settings are reverted to default after each upgrade of the Scanner.

The fixlet has been updated to manage the trace level definition of the new BigFix Scanner logs.

Collect Logs from Endpoints Troubleshooting

The task allows you to collect log files for troubleshooting purposes. Use the fixlet only when suggested by the HCL Support.

For more information, refer to Collecting logs for troubleshooting purposes. p

The fixlet has been updated to manage the collection of BigFix Scanner logs.

Analyze the Relevance of the a Fixlet or Task Troubleshooting This task creates an analysis that checks which part of the relevance expression of a particular Fixlet or task is not matched. Check the results of the analysis to learn why a Fixlet or task is not relevant on a particular endpoint.

Other fixlets

The remaining fixlets and task can help you manage, configure, troubleshoot, deploy and migrate the product and its components, and manage VM Managers.

Table 3. Other fixlets
Name Category Description
Wscan CPU Threshold Setting Scan Management This task is used to set the BigFix Scanner Wscan CPU Threshold. With this setting, you can limit the CPU utilization of the Wscan.
Add Excluded Directories Scan Management This task is used to add entries to the list of directories that are excluded from scanning. After you specify the directories, run the task against the chosen endpoints. The directories are then sent to the scanner that omits them during the software scan. For more information, see: Excluding additional directories.

The fixlet is update to manage adding of the excluded directories in the new BigFix Scanner service.

Remove Excluded Directories Scan Management This task is used to remove entries from the list of directories that are excluded from scanning. After you specify the directories, run the task against the chosen endpoints. The directories are then sent to the scanner that includes them back in the software scan. For more information, see: Including the excluded directories back in scans.

The fixlet is update to manage removal of the excluded directories in the new BigFix Scanner service.

Configure Scan Cache Scanner This task allows for configuring the file system scan cache. By default, the cache is enabled and is cleared after every scan. The cache is shared by different scan types. The task is relevant only on computers where the scanner is installed. For more information, see: Changing scanner trace settings.
Note: From BigFix Scanner version 11.0.38.1, the cache is controlled through global configuration settings.
<deprecated> Change Scanner Cache Folder
Note: This task applies to BigFix Scanner with version older then 11.0.38.0
Scanner The scanner cache folder is used to store information about scanned files and directories in your file system. The scanner locates the cache folder using the file hierarchy which results in quick scans. The amount of disk space that is needed for the cache depends on the number of files that are being scanned. If the current cache folder does not have sufficient disk space, you can change the location of the cache folder or optimize the cache.

After you change the cache folder or restore the default, all current cache is removed. A new cache is created after you run the software scan. To check the current cache folder, see the results of the Scanner Information analysis.

Uninstall Scanner Scanner This task uninstalls the scanner and the corresponding configuration files from the specified endpoints.

Uninstall Scanner fixlet removes all CIT exploiters

Cleanup Scanner Installations 11.0.0 (9.2.35) and older Scanner

Use this task to remove Scanner Installations from former installation paths.

For more information, refer to Cleanup Scanner Installations.