Running software scans and gathering scan results

Available from 9.2.7. The script that is responsible for the software scan collects the results of the catalog-based, package data, and ISO tags scan, as well as retrieves results of the capacity scan and the computer.yml file. All these results are combined and compressed into a common .zip or tag.gz package that can be imported to BigFix Inventory.

About this task

  • Make sure that you have the appropriate privileges to perform this task.
    • UNIX root
    • Windows Administrative privileges with elevation
  • Each time you update the software catalog in BigFix Inventory, run an import of data or wait for the scheduled import. Next download the newest version of software catalog to an endpoint to run the software scan on it. For more information, see: Downloading the software catalog.

Additonal information:

  • The scan takes around 30 minutes. The exact time depends on the computer load, file system size, and the CPU threshold if you set it.
  • For information about default and minimal scan frequency, see: Frequency of scans and uploads of data.
  • By default, no limit is set on the processor usage during the scan. To limit processor usage, set the CPU threshold. For more information, see: Optimizing the processor utilization.

Procedure

  1. Go to the directory where you uploaded the disconnected scan package.
  2. Run the following script to initiate the scan:
    • UNIX run_sw_and_pack.sh
    • Windows run_sw_and_pack.bat

Results

A compressed package with scan results was created in the output directory. It contains capacity scan results since the date when the last package was generated. The uncompressed scan results are deleted from their original location to ensure that they are not included in any future packages.

Managing computer properties in the computer.yml file

About this task

Starting from BigFix Inventory version 10.0.15, the computer.yml file is recreated during every capacity scan to ensure that changes in IP addresses or host names are captured.

Computer properties that are being updated in the computer.yml file while running run_sw_and_pack.bat or run_sw_and_pack.sh files are: Agent Version, Catalog Version, Computer Name, Operating System, DNS Name, IP Address (and Endpoint ID if the previously generated config/endpoint_id.txt file does not exist).

Below are different scenarios that explain how the script handles custom computer properties that you can add in the computer.yml file:
  1. On Unix
    To allow the custom computer properties to be included in the computer.yml file, add the properties manually to the computer.yml file. Custom computer properties are not affected by running the run_sw_and_pack.sh file. Other default computer properties are updated every time the script is run.
  2. On Windows
    To allow the custom computer properties to be included in the computer.yml file, add the properties manually to the config/computer_custom_properties.yml file. In the Windows Disconnected Scanner Package, an empty config/computer_custom_properties.yml file exists by default. The Disconnected Scanner does not consider the empty file when the run_sw_and_pack.bat script is run. If you add custom computer properties to the config/computer_custom_properties.yml file, all computer properties added to the file are added at the bottom of the computer.yml file while running the run_sw_and_pack.bat file.
    The properties Endpoint ID, Agent Version, Catalog Version, Computer Name, Operating System, DNS Name, and IP Address are listed at the top of the computer.yml file, and these properties are updated every time the script is run. The custom properties from the config/computer_custom_properties.yml file are added at the bottom of the computer.yml file.

Sample content of the computer_custom_properties.yml file:

My property 1: XYZ1
My property 2: XYZ2
111.222.555.666
My property 3: XYZ3

Sample content of the computer.yml file, where custom properties from computer_custom_properties.yml are added at the bottom:

endpointID: XXXXXXXX-1111111111
Agent Version: windows 10.0.15.0-20231031-0839
Catalog Version: 2600000.0
Computer Name: XXXXXXXX
Operating System: Windows 10
DNS Name: XXXXXXXX
XXXXXXXX
IP Address: 111.111.1.11
22.222.222.222
My property 1: XYZ1 
My property 2: XYZ2 
111.222.555.666 
My property 3: XYZ3