Welcome
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
Fixlet Repository Guide
This document provides detailed list of out-of-box fixlets available within BigFix Runbook AI. This information is intended for administrators and users authorized for configuring use cases / fixlets within BigFix Runbook AI, which works in conjunction with HCL Bigfix engine.
Fixlet Repository
This section lists the out-of-the-box fixlets available in BigFix Runbook AI, categorized into Linux Server Management, Windows Server Management, Active Directory, and Database Management.
Windows Server Management
Windows Server Management provides various fixlets for managing and configuring Windows server settings such as adding virtual directories, creating DNS zones, deleting event logs, enabling drive quota, and managing user accounts.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
- Introduction
  This guide provides you with an overview of BigFix Runbook AI and its features and benefits. It also provides an architectural overview and talks about various configurations and end user activities in brief.
- Pre-requisites guide
  This guide provides instructions to install the prerequisites required for BigFix Runbook AI. This includes the installation of MongoDB and Solr for both HA (High Availability) and non-HA modes as well as generation of certificates for authentication and authorization purposes.
- Installation Guide
  This guide provides instructions to install BigFix Runbook AI. It includes the pre-installation and the installation procedures for BigFix Runbook AI. This guide also provides summary material about additional servers and optional post- installations and references to the other documents for detailed information.
- Configuration Guide
  This guide instructs on how to install and configure BigFix Runbook AI. These instructions also include the configuration procedures for the product.
- User Guide
  This guide introduces you to the key concepts of BigFix Runbook AI and describes how to use the product. It provides an overview of the end-user interface and instructions to perform different tasks. This guide is intended for the BigFix Runbook AI end-users working towards resolution of IT support tickets.
- API Guide
  BigFix Runbook AI API guide provides documentation and instructions on how to use its application programming interface (API), including details on the functions, parameters, and endpoints available for developers to interact with the API.
- Fixlet Repository Guide
  This document provides detailed list of out-of-box fixlets available within BigFix Runbook AI. This information is intended for administrators and users authorized for configuring use cases / fixlets within BigFix Runbook AI, which works in conjunction with HCL Bigfix engine.
  - BigFix Runbook AI Overview
    BigFix Runbook AI is an Intelligent Runbook Automation product that uses AI, ML, and NLP to automate IT Operations tasks and provide automated remediation. It reduces costs, mitigates risks, improves efficiency, and offers quick implementation with reusable runbooks.
  - Fixlet Repository
    This section lists the out-of-the-box fixlets available in BigFix Runbook AI, categorized into Linux Server Management, Windows Server Management, Active Directory, and Database Management.
    - Linux Server Management
      This document provides a list of Linux server management tasks, including file system backup, swap space management, package installation, user management, and system configuration.
    - Windows Server Management
      Windows Server Management provides various fixlets for managing and configuring Windows server settings such as adding virtual directories, creating DNS zones, deleting event logs, enabling drive quota, and managing user accounts.
    - Active Directory
      Active Directory provides a range of fixlets for managing user accounts, groups, authentication policies, and other AD objects. These fixlets offer user-friendly methods for tasks such as adding service accounts, changing user passwords, checking administrator privileges, and more.
    - Database Management
      This document provides a list of database management tasks for various database systems including SQL, Oracle, and PostgreSQL. The tasks include checking database status, taking backups, modifying database parameters, creating and dropping databases, and granting permissions to users.
    - Network Management
      This section covers enabling DHCP tracing and DNS server diagnostics, including fetching DNS server diagnostics and enabling DNS diagnostics.
  - Onboarding of Fixlets on Bigfix Instance
    This section covers onboarding reusable and out of the box fixlets on a Bigfix instance.
  - Configuring and Managing the Fixlets on BigFix Runbook AI instance
    This section informs users on how to configure and manage fixlets on a BigFix Runbook AI instance. Users can bulk upload fixlets using an excel file provided with the BigFix Runbook AI package. Detailed steps for bulk upload are mentioned in the Configuration Guide.
- Integration Guide
  This guide provides instructions to enable integrations with various ITSM and Runbook Automation tools, while configuring BigFix Runbook AI.
- Lab Manual
  This lab manual provides infrastructure administrators, installation and configuration administrators, and end users with detailed instructions on how to install, configure, and use BigFix Runbook AI. It is divided into modules, each containing an introduction and lab exercises. The manual also references additional servers, post-installation steps, and other documents for more information.
- Troubleshooting Guide
  This guide provides instructions to troubleshoot some of the commonly occurring issues along with the resolution steps. This information is intended for administrators responsible for installing, configuring, and supporting BigFix Runbook AI product.
- Abbreviations
  A list of abbreviations and their expansions.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Windows Server Management

Windows Server Management provides various fixlets for managing and configuring Windows server settings such as adding virtual directories, creating DNS zones, deleting event logs, enabling drive quota, and managing user accounts.

Add IIS Virtual Directory


Fixlet User Friendly Name	Windows_Add_IIS_Virtual_Directory
Description	Creates a virtual directory in IIS.

Add Local User


Fixlet User Friendly Name	Windows_Add_Local_User
Description	Adds a local user to the windows machine.

Check Firewall State


Fixlet User Friendly Name	Windows_Check_Firewall_State
Description	Allows you to check the state of the Firewall.

Create DNS Zone


Fixlet User Friendly Name	Windows_Create_DNS_Zone
Description	Creates a DNS Zone from Windows Server.

Delete Powershell Event Logs


Fixlet User Friendly Name	Windows_Create_DNS_Zone
Description	Deletes Powershell Event Logs from Windows Server. Clears powershell event logs.

Delete Security Event Logs


Fixlet User Friendly Name	Windows_Delete_Security_Event_Logs
Description	Deletes Security Event Logs from Windows Server. Clears security event logs.

Delete System Event Logs


Fixlet User Friendly Name	Windows_Delete_System_Event_Logs
Description	Deletes System Event Logs from Windows Server. Clears system event logs.

Disable User Account


Fixlet User Friendly Name	Windows_Disable_User_Account
Description	Disables a windows local user account.

Disk Cleanup


Fixlet User Friendly Name	Windows_Disk_Cleanup
Description	Frees up disk space on windows server hard drive. Clears disk space.

Disk Partition


Fixlet User Friendly Name	Windows_Disk_Partition
Description	Creates a new Disk partition on Windows machine. Also clears disk partition.

Display Environment Variables


Fixlet User Friendly Name	Windows_Display_Environment_Variables
Description	Lists all the environment variables in Linux.

Display OS Memory


Fixlet User Friendly Name	Windows_Display_OS_Memory
Description	Displays OS memory of windows server.

Enable Drive Quota


Fixlet User Friendly Name	Windows_Drive_Quota_Enable
Description	Enables Drive Quota on the Windows Server.

Get Execution Policy


Fixlet User Friendly Name	Windows_Get_Execution_Policy
Description	Allows the display of execution policies for each scope in the order of precedence.

Get Firewall Rules


Fixlet User Friendly Name	Windows_Get_Firewall_Rules
Description	Displays firewall rules on windows server.

Get Last BootUp Time


Fixlet User Friendly Name	Windows_Get_Last_BootUp_Time
Description	Displays the last boot up time details of the windows server.

Hide User Account


Fixlet User Friendly Name	Windows_Hide_User_Account
Description	It hides the user account.

CPU Utilization


Fixlet User Friendly Name	Windows_High_CPU_Utilization
Description	Checks the utilization of services on windows server, counts the number of processes which are running. Shows high CPU utilization on windows sever.

Memory Utilization


Fixlet User Friendly Name	Windows_High_Memory_Utilization
Description	Displays the memory (RAM) on windows server. Shows high memory utilization on windows server.

Local Admin


Fixlet User Friendly Name	Windows_Local_Admin
Description	Gets the list of all local admin users on a windows server.

Local User Deletion


Fixlet User Friendly Name	Windows_Local_User_Deletion
Description	Deletes a specified local user from a given windows server.

Ping Failure


Fixlet User Friendly Name	Windows_Ping_Failure
Description	Checks if the windows server is ready to communicate or not.

Remove DNS Zone


Fixlet User Friendly Name	Windows_Remove_DNS_Zone
Description	Removes given DNS Zone from Windows Server.

Seurity Info of Current_User


Fixlet User Friendly Name	Windows_Security_Info_Of_Current_User
Description	Provides Security Information of Current users.

Server Reboot


Fixlet User Friendly Name	Windows_Server_Reboot
Description	Restarts the windows machine in case server if windows server needs restarting.

Windows Service Restart


Fixlet User Friendly Name	Windows_Service_Restart
Description	Restarts the specified services on Windows server if available.

Unlock User


Fixlet User Friendly Name	Windows_Unlock_User
Description	Unlocks the user account.

Unzip File


Fixlet User Friendly Name	Windows_Unzip_File
Description	Unzips a given compressed file at a specified location.

Modify Min Password Length


Fixlet User Friendly Name	Windows_Modify_Min_Password_Length
Description	Allows for modification in minimum password length.

Modify Max Password Age


Fixlet User Friendly Name	Windows_Modify_Min_Password_Length
Description	Allows for changes to maximum password age allowed.

Set User Logon Hrs


Fixlet User Friendly Name	Windows_Set_User_Logon_Hrs
Description	Sets logon hours for a particular user.

Remove ACL for User on Directory


Fixlet User Friendly Name	Windows_Remove_ACL_For_User_On_Directory
Description	Allows for removal of ACL for user on Directory.

List Loggedin Users


Fixlet User Friendly Name	Windows_List_Loggedin_Users
Description	Manages and fetches list of users logged into Windows at that moment.

Lock User


Fixlet User Friendly Name	Windows_Lock_User
Description	Manages and fetches Windows locked users list.

List Local Admin Users


Fixlet User Friendly Name	Windows_List_Local_Admin_Users
Description	Manages and fetches the list of users with Local Admin management rights. Requires Fetch windows list of local admin users.