Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 6596 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Shh/Updater-B: selectively acknowledging FP's and errors via script?

MattAustin

Hey folks, hope y'all's week has been going well! 

We've been going about cleaning up our endpoints from last week's glitch;  the fix vbscript is working very well, and we're marking down the hostnames of the computers that have been fixed.  

I saw the script that will acknowledge ALL the shh/updater-b alerts in Enterprise Console (4.5 in our case) but what if i don't want to acknowledge all of them?  

Is there a way I can feed it a list of hostnames to acknowledge the SHH/Updater-B on?  I'd like to later run a new list of ones to work on.  

Or am I thinking about this all wrong?  if I acknowledge them all, will the still-broken ones repopulate again?  I had thought they would be ignored, since I acknowledged it.  

Any advice or help would be appreciated.  

:33187


This thread was automatically locked due to age.
Parents
  • 0

    Thanks, Jak--by 'fixed' I mean bad ide deleted, new ide in place, SAU repaired, and where applicable, other 'updater' applications repaired (google, itunes, etc).  They're ready to be acknowledged in sophos, but I don't want to acknoweldge all, since not all are repaired.  I'm just a lowly helpdesk manager, not a ton of sql experience, so I'll look through and see what I can find/learn.  The list we have is the computers' hostnames that have been repaired, so the "computer name" field in SEC. 

    :33203
Reply
  • 0

    Thanks, Jak--by 'fixed' I mean bad ide deleted, new ide in place, SAU repaired, and where applicable, other 'updater' applications repaired (google, itunes, etc).  They're ready to be acknowledged in sophos, but I don't want to acknoweldge all, since not all are repaired.  I'm just a lowly helpdesk manager, not a ton of sql experience, so I'll look through and see what I can find/learn.  The list we have is the computers' hostnames that have been repaired, so the "computer name" field in SEC. 

    :33203
Children
No Data