Forum Discussion

mperrotta's avatar
mperrotta
Brass Contributor
Aug 06, 2020

Different Analytic Rules based on OS

Hello,

 

We have the MMA agent installed on some of our physical systems. What we are looking to do is to have different analytic rules for our Workstations vs our Servers. It seems the best way we could do this is if we could query the OS version from one of the tables. 

 

Is the OS version logged in any of the data tables to be able to do this or is there better way to accomplish this.

 

Thanks,

Mike

5 Replies

  • mergene's avatar
    mergene
    Brass Contributor
    Aug 08, 2020

    mperrotta I believe you have naming conventions for Servers and Workstations. If this the case, you can add a condition like ' where Computer startswith/contains "srv" '. 

  • Javier-Soriano's avatar
    Javier-Soriano
    Icon for Microsoft rankMicrosoft
    Aug 07, 2020

    Hi mperrotta , the Heartbeat table contains the fields you need:

     
    • OSMajorVersion (string)
    • OSMinorVersion (string)
    • OSName (string)
    • OSType (string)

     

    Regards

    • mperrotta's avatar
      mperrotta
      Brass Contributor
      Aug 07, 2020

      Javier-Soriano Unfortunately in the Heartbeat table, regardless if it is Win 10 or a Windows Server, they all show up as the same version. And the OS Type is just Windows.

       

      Thanks

      • Javier-Soriano's avatar
        Javier-Soriano
        Icon for Microsoft rankMicrosoft
        Aug 07, 2020

        mperrotta did you also check Update table? This should exist if you have the update management solution installed in the workspace...

Resources