Creating a Custom Fixlet

You can create a new Custom Fixlet to define the custom remediation actions for specific endpoints.

About this task

To create a Custom Fixlet, complete these steps:

Procedure

  1. In the Fixlet Explorer, navigate to the List view or click on any of the KPI cards.
  2. Click Create Fixlet.
  3. On the Details page, configure the following fields:
    • Name: Enter a unique, descriptive title for the Custom Fixlet. (Required).
    • Allowed for Fixlet streams: Allows the Custom Fixlet to be used in automated Fixlet Streams.
    • Severity: Select the appropriate severity level (e.g., Critical, High, Medium, Low). The severity level type is currently entered manually as a string input and cannot be selected from a dropdown menu.
    • Category: Specify the category (e.g., Security Advisory, Patch).
    • CVE: Enter applicable CVE IDs, one per line (for example, CVE-2026-33842).
    • Source: Specify the origin source of the content (e.g., Adobe, Internal, MyOrg).
    • Description: Enter optional details describing the custom Fixlet.
  4. Click Next to proceed to the Detection Rules tab.
  5. Specify the criteria to target specific endpoints by selecting one of the following methods:
    • Query: Apply a query based on device properties (e.g., Device Name contains 'Win') to enable dynamic targeting of matching endpoints.
    • Device group: Select an existing static or dynamic device group.
    • Relevance clause: Enter custom relevance expressions. You can add multiple relevance clauses.
  6. Click Next to proceed to the Actions tab.
  7. Define the Remediate actions.
    • Specify the Action Label and Enter the Action Script (using BigFix Action Script syntax).
    • Use the "Set as default actionscript" toggle button to set the action script as the default action for the fixlet.
    • Select one of the three Success criteria options.
      • The applicability relevance evaluates to false.
      • All lines of the action script have completed successfully.
      • The following relevance clause evaluates to false.
  8. Optional: Click Add new action to create multiple actions.
    Note:
    Additional Actions allow the user to choose between multiple remediations when Deploying remedial actions. For example, one Action might upgrade the product while another removes it completely. Fixlet Streams automations only issue the Default Action.
  9. Click Next to proceed to the Summary tab.
  10. Review the fixlet details. Optional: Select the Allowed for Fixlet streams checkbox to make this fixlet available in other applications.
  11. Click Create Fixlet.