Welcome
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
Fixlet Repository Guide
This document provides detailed list of out-of-box fixlets available within BigFix Runbook AI. This information is intended for administrators and users authorized for configuring use cases / fixlets within BigFix Runbook AI, which works in conjunction with HCL Bigfix engine.
Fixlet Repository
This section lists the out-of-the-box fixlets available in BigFix Runbook AI, categorized into Linux Server Management, Windows Server Management, Active Directory, and Database Management.
Linux Server Management
This document provides a list of Linux server management tasks, including file system backup, swap space management, package installation, user management, and system configuration.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
- Introduction
  This guide provides you with an overview of BigFix Runbook AI and its features and benefits. It also provides an architectural overview and talks about various configurations and end user activities in brief.
- Pre-requisites guide
  This guide provides instructions to install the prerequisites required for BigFix Runbook AI. This includes the installation of MongoDB and Solr for both HA (High Availability) and non-HA modes as well as generation of certificates for authentication and authorization purposes.
- Installation Guide
  This guide provides instructions to install BigFix Runbook AI. It includes the pre-installation and the installation procedures for BigFix Runbook AI. This guide also provides summary material about additional servers and optional post- installations and references to the other documents for detailed information.
- Configuration Guide
  This guide instructs on how to install and configure BigFix Runbook AI. These instructions also include the configuration procedures for the product.
- User Guide
  This guide introduces you to the key concepts of BigFix Runbook AI and describes how to use the product. It provides an overview of the end-user interface and instructions to perform different tasks. This guide is intended for the BigFix Runbook AI end-users working towards resolution of IT support tickets.
- API Guide
  BigFix Runbook AI API guide provides documentation and instructions on how to use its application programming interface (API), including details on the functions, parameters, and endpoints available for developers to interact with the API.
- Fixlet Repository Guide
  This document provides detailed list of out-of-box fixlets available within BigFix Runbook AI. This information is intended for administrators and users authorized for configuring use cases / fixlets within BigFix Runbook AI, which works in conjunction with HCL Bigfix engine.
  - BigFix Runbook AI Overview
    BigFix Runbook AI is an Intelligent Runbook Automation product that uses AI, ML, and NLP to automate IT Operations tasks and provide automated remediation. It reduces costs, mitigates risks, improves efficiency, and offers quick implementation with reusable runbooks.
  - Fixlet Repository
    This section lists the out-of-the-box fixlets available in BigFix Runbook AI, categorized into Linux Server Management, Windows Server Management, Active Directory, and Database Management.
    - Linux Server Management
      This document provides a list of Linux server management tasks, including file system backup, swap space management, package installation, user management, and system configuration.
    - Windows Server Management
      Windows Server Management provides various fixlets for managing and configuring Windows server settings such as adding virtual directories, creating DNS zones, deleting event logs, enabling drive quota, and managing user accounts.
    - Active Directory
      Active Directory provides a range of fixlets for managing user accounts, groups, authentication policies, and other AD objects. These fixlets offer user-friendly methods for tasks such as adding service accounts, changing user passwords, checking administrator privileges, and more.
    - Database Management
      This document provides a list of database management tasks for various database systems including SQL, Oracle, and PostgreSQL. The tasks include checking database status, taking backups, modifying database parameters, creating and dropping databases, and granting permissions to users.
    - Network Management
      This section covers enabling DHCP tracing and DNS server diagnostics, including fetching DNS server diagnostics and enabling DNS diagnostics.
  - Onboarding of Fixlets on Bigfix Instance
    This section covers onboarding reusable and out of the box fixlets on a Bigfix instance.
  - Configuring and Managing the Fixlets on BigFix Runbook AI instance
    This section informs users on how to configure and manage fixlets on a BigFix Runbook AI instance. Users can bulk upload fixlets using an excel file provided with the BigFix Runbook AI package. Detailed steps for bulk upload are mentioned in the Configuration Guide.
- Integration Guide
  This guide provides instructions to enable integrations with various ITSM and Runbook Automation tools, while configuring BigFix Runbook AI.
- Lab Manual
  This lab manual provides infrastructure administrators, installation and configuration administrators, and end users with detailed instructions on how to install, configure, and use BigFix Runbook AI. It is divided into modules, each containing an introduction and lab exercises. The manual also references additional servers, post-installation steps, and other documents for more information.
- Troubleshooting Guide
  This guide provides instructions to troubleshoot some of the commonly occurring issues along with the resolution steps. This information is intended for administrators responsible for installing, configuring, and supporting BigFix Runbook AI product.
- Abbreviations
  A list of abbreviations and their expansions.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Linux Server Management

This document provides a list of Linux server management tasks, including file system backup, swap space management, package installation, user management, and system configuration.

Backup of File System


Fixlet User Friendly Name	Linux_Backup_Filesystem
Description	Backup a Filesystem in gz format mounted on and store backup file in destination path.

Backup of File System using Rsync


Fixlet User Friendly Name	Linux_Backup_Filesystem_Using_Rsync
Description	Create a backup of Filesystem using rsync mounted on and store the backup file in the path.

Backup of File System using Tar


Fixlet User Friendly Name	Linux_Backup_Filesystem_Using_Tar
Description	Create a backup of Filesystem in tar format mounted on and store the backup file in the path in tar format.

Extend Swap Space for Swap file


Fixlet User Friendly Name	Linux_Change_Swap_Space
Description	Extends the swap space for the swapfile in the Linux server.

Check NFS Port Status


Fixlet User Friendly Name	Linux_Check_NFS_Port
Description	Checks whether the NFS port is open or not. Also checks the NFS port for accessibility.

Check RPM Package Information


Fixlet User Friendly Name	Linux_Check_RPM_Package_Info
Description	Checks if the RPM package is installed and fetches its information. Also checks RPM installation status.

Clear Swap Space for Swap file


Fixlet User Friendly Name	Linux_Clear_Swap_Space
Description	Creates a swap file to create a swap in the Linux server.

Create the Swap Space


Fixlet User Friendly Name	Linux_Create_Swap_Space
Description	Extends the swap space for the swapfile in the Linux server.

Create User


Fixlet User Friendly Name	Linux_Create_User
Description	Creates a user on the Linux server.

Disable SELinux


Fixlet User Friendly Name	Linux_Disable_Selinux
Description	Runs the command setenforce 0 to disable the Selinux.

Disk Cleanup


Fixlet User Friendly Name	Linux_Disk_Cleanup
Description	Frees disk space on the Linux server.

Firewall Port Security Compliance


Fixlet User Friendly Name	Linux_Firewall_Port_Security_Compliance
Description	This installs port security on Linux server. Port Security is compliance configured on firewall.

CPU Utilization


Fixlet User Friendly Name	Linux_High_CPU_Utilization
Description	Prints the CPU utilization and finds high CPU utilization on server. Kills processes to reduce usage.

Memory Utilization


Fixlet User Friendly Name	Linux_High_Memory_Utilization
Description	Checks memory (RAM) usage on the Linux server and finds high memory usage on the server.

Install Cloud Watch Agent


Fixlet User Friendly Name	Linux_Install_Cloud_Watch_Agent
Description	Installs cloudwatch package. Enables and starts Amazon Cloudwatch Agent.

Install Package


Fixlet User Friendly Name	Linux_Install_Package
Description	Install RPM package. Configure RPM package.

Install Postfix


Fixlet User Friendly Name	Linux_Install_Postfix
Description	Install Postfix to route and deliver email on a Linux system.

Logical Volume Creation


Fixlet User Friendly Name	Linux_Logical_Volume_Creation
Description	Adds a new Logical volume to the server.

Mount NFS Server


Fixlet User Friendly Name	Linux_Mount_NFS_Server
Description	Checks whether the NFS mount point is mounted or not. Also checks NFS mount status.

Passwordless Authentication


Fixlet User Friendly Name	Linux_Passwordless_Authentication
Description	Configuring this enables passwordlesss authentication on Linux server.

Process List of User


Fixlet User Friendly Name	Linux_Process_List_Of_User
Description	Lists the processes of the user on the machine.

Remove User


Fixlet User Friendly Name	Linux_Remove_User
Description	Enables removal or deletion of existing user.

Service Restart


Fixlet User Friendly Name	Linux_Service_Restart
Description	Restarts the specified services on Linux server if available.

Set Hardening Parameters


Fixlet User Friendly Name	Set_Hardening_Parameters
Description	Sets the checklist during risk assessments as part of the process to verify that servers are secure i.e. sets hardening parameters on the Linux server.

Set Hostname


Fixlet User Friendly Name	Linux_Set_Hostname
Description	Allows setting or changing the hostname.

Set Sudo Permissions


Fixlet User Friendly Name	Linux_Set_Sudo_Permissions
Description	Sets root sudo permissions.

Setup ResolvConf


Fixlet User Friendly Name	Linux_Setup_ResolvConf
Description	Sets up resolver configuration file for Linux systems to configure DNS name servers.

Show Shadow User Info


Fixlet User Friendly Name	Linux_Show_Shadow_User_Info
Description	Displays the shadow user information on a specified Linux server.

SSM Agent


Fixlet User Friendly Name	Linux_SSM_Agent
Description	SSM Agent sends status and execution information back to the Systems Manager service by using the Amazon Message Delivery Service.

Users with Admin Access


Fixlet User Friendly Name	Linux_Users_With_Admin_Access
Description	Fetches the list of all the users having admin privileges.

Zombie Process


Fixlet User Friendly Name	Linux_Zombie_Process
Description	Lists the count of zombie process in linux server.

Extend Logical Volume


Fixlet User Friendly Name	Linux_Logical_Volume_Extend
Description	Extends the Logical volume by adding space to it. Can also resize the Logical volume.

Remove Logical Volume


Fixlet User Friendly Name	Linux_Logical_Volume_Remove
Description	Removes Logical volume from the server.

Process_Count_Per_User


Fixlet User Friendly Name	Linux_Process_Count_Per_User
Description	Counts processes run by each user and gives a count.

Delete Group


Fixlet User Friendly Name	Linux_Group_Delete
Description	Allows for deletion of existing groups in Linux server.

Check Package Installed


Fixlet User Friendly Name	Linux_Check_Package_Installed
Description	Validates if the software is already installed or not. Checks installed software status.

Remove Softlink


Fixlet User Friendly Name	Linux_Remove_Softlink
Description	Allows for removal or deletion of existing softlinks.

Account Expiry Change


Fixlet User Friendly Name	Linux_Account_Expiry_Change
Description	Changes the expiry date of the user. Also edits the expiry date of user.

Change HomeDirectory User


Fixlet User Friendly Name	Linux_Change_HomeDirectory_User
Description	Changes the home directory for the user in the Linux server.

Create Softlink


Fixlet User Friendly Name	Linux_Create_Softlink
Description	Creates a symbolic link (also known as a softlink or symlink) consisting of a special type of file that serves as a reference to another file or directory.

List BlockedIP


Fixlet User Friendly Name	Linux_List_BlockedIP
Description	Finds/Checks Banned (Denied) IP addresses.

Set File Permission


Fixlet User Friendly Name	Linux_Set_File_Permission
Description	Changes permissions of files or directories.

VolGrp LogVol FileSystem


Fixlet User Friendly Name	Linux_VolGrp_LogVol_FileSystem
Description	Fetches the list of all volume groups and logical volumes. Gets all logical volumes groups.

Modify Filesystem


Fixlet User Friendly Name	Linux_Modify_Filesystem
Description	Modifies the format of the partition. Also modifies the format of filesystem.

Creation of Filesystem


Fixlet User Friendly Name	Linux_Filesystem_Creation
Description	Adds filesystem to the target server. Mounts and enables filesystem to the target server.

Deletion of Filesystem


Fixlet User Friendly Name	Linux_Filesystem_Deletion
Description	This removes the filesystem from the Linux OS. Filesystem removal from linux OS.

Add Entry Sudoers


Fixlet User Friendly Name	Linux_Add_Entry_Sudoers
Description	Provides access to users into the sudoers file. Gives access to users in sudoers file.

Change Attribute Dir


Fixlet User Friendly Name	Linux_Change_Attribute_Dir
Description	Changes file attributes to Linux. Attribute directory needs to be changed.

Delete Entry Sudoers


Fixlet User Friendly Name	Linux_Delete_Entry_Sudoers
Description	Deletes user entry and its parameters from /etc/sudoers file.

Create Archive


Fixlet User Friendly Name	Linux_Create_Archive
Description	Creates the archive for the file.

Linux Cronjob Add


Fixlet User Friendly Name	Linux_Cronjob_Add
Description	Schedules cron job/task/script at a specific time.