Wiki source code of Abfragen auswerten

Last modified by Sabrina V. on 2025/03/31 09:22
Show last authors
1 {{aagon.priorisierung}}
2 60
3 {{/aagon.priorisierung}}
4
5 {{aagon.floatingbox/}}
6
7
8 = General information on evaluating a Query =
9
10 After you have created and executed a query, the results are displayed in the Query Results. The results appear in a new vertical tab with the respective name of the query. The results are displayed in the grid, which displays the dates in tabular form according to the arrangement of the fields included in the query. For datasets containing a field with multiple values (e.g. several IP and MAC addresses of a machine), these multiple values are displayed in a sub-table. You can expand and collapse this table using the [[image:grafik.png]] / [[image:image-20240703104230-2.png]] buttons.
11
12 The respective icon in front of the dataset shows you how the associated client was inventoried.
13
14
15 (% style="width:828px" %)
16 |(% style="width:110px" %)**Symbol**|(% style="width:698px" %)**Description**
17 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@clienttypeservice_small.png||alt="ClientTypeService" height="32" width="32"]]|(% style="width:698px" %)The Client was inventoried via the [[ACMP Agent>>doc:ACMP.67.Arbeiten mit der ACMP Console.Clients erfassen.ACMP Agenten installieren.WebHome]]
18 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@clienttypeosc_small.png||alt="ClientTypeOSC" height="32" width="32"]]|(% style="width:698px" %)The Client was detected by [[OneScanClient>>doc:ACMP.67.Arbeiten mit der ACMP Console.Clients erfassen.OneScanClient.WebHome]]
19 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@clienttypead_small.png||alt="ClientTypeAD" height="32" width="32"]]|(% style="width:698px" %)Client scanned by [[Agentless Scanner>>doc:ACMP.67.Arbeiten mit der ACMP Console.Clients erfassen.Agentless Scanner.WebHome]]
20 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@clienttypemanualclient_small.png||alt="ClientTypeManualClient" height="32" width="32"]]|(% style="width:698px" %)The Client was entered [[manually>>doc:ACMP.67.ACMP-Solutions.Client-Management.Manuelle Clients.WebHome]]
21 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@oslinux.png||alt="OSLinux" height="32" width="32"]]|(% style="width:698px" %)Client was inventoried via [[XML Importer>>doc:ACMP.67.Arbeiten mit der ACMP Console.Clients erfassen.XML Importer.WebHome]] (Linux) or via Linux Unit Agent
22 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@osmac.png||alt="OSMac" height="32" width="32"]]|(% style="width:698px" %)Client was inventoried via [[XML Importer>>doc:ACMP.67.Arbeiten mit der ACMP Console.Clients erfassen.XML Importer.WebHome]] (Mac) or via Linux Unit Agent
23 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@client_networkboot.png||alt="Client_NetworkBoot" height="32" width="32"]]|(% style="width:698px" %)The Client was detected using the [[Network Boot Service>>doc:ACMP.67.ACMP-Solutions.OS Deployment.Network Boot Service.WebHome]]
24 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@clienttypemobileclientandroid.png||alt="ClientTypeMobileClientAndroid" height="32" width="32"]]|(% style="width:698px" %)This is a mobile Android Client
25 |(% style="width:110px" %)[[image:XWiki.Images.WebHome@clienttypemobileclientios.png||alt="ClientTypeMobileClientiOS" height="32" width="32"]]|(% style="width:698px" %)This is a mobile iOS Client
26 |(% style="width:110px" %)(((
27 [[image:Windows Mobile Client Icon.png||height="32" width="32"]]
28 )))|(% style="width:698px" %)This is a Windows Mobile Client (Smartphone OS)
29
30 {{aagon.infobox}}
31 If you see a warning triangle icon ([[image:DoppelteClientId Hinweisbox Hintergrund Icon.png||height="19" width="20"]]) instead of the associated Client, it is a [[suspicious Client>>doc:||anchor="HSpecialfeature:SuspiciousClientsinthesystem"]].
32 {{/aagon.infobox}}
33
34
35 = Filtering Query Results =
36
37 Query results can be filtered again to, for example, continuing to narrow them down or to create a better overview. To do this, navigate to the //Filter Results// ([[image:XWiki.Images.WebHome@filter_dynamic.png||alt="image-20240703104558-3.png" height="22" width="22"]])  in the quick-selection bar in the open query result. Left-click to open the action, which will cause the Filter Editor window to appear.
38
39 You can define additional filters within the filter editor. First, you can use the //filter //action field to add either a condition or a group. A condition opens one of the existing filters. To do this, simply select the appropriate list entry from the fields. You can also change the operator, which is set to //equal to //by default, by clicking on the entry and selecting a different one from the list. You can enter any comparison value in the <clear> field.
40
41 {{figure}}
42 [[image:65_Abfrageverwaltung_Abfrageergebnisse filtern_546.png||data-xwiki-image-style-alignment="center"]]
43
44 {{figureCaption}}
45 Filtering Query results
46 {{/figureCaption}}
47 {{/figure}}
48
49 You can change the topmost operator (//AND//, //OR//, //NOT// //AND// or //NOT// //OR//) for a group that has been added. The conditions that are added after this are added after this operator, so that they must be fulfilled for the conditions.
50
51 You can use the individual comparison operators and fields to create completely individual filters. You can apply these directly as a filter for the open Query Result by clicking on the button of the same name. As soon as you have done this, the result will be re-filtered and updated. If you would like to reuse the filter for other Queries or at a later point in time, you can save it under //Save as...//. Please note that the active filter is saved as a.flt file. You can load a previously created filter using the //Open... //button. If you want to apply the filter directly, click on //Apply// and the grid view will be updated immediately. The filter window will remain open for possible changes. Otherwise, close the window by clicking on //OK//.
52
53 = Exporting Query Results =
54
55 You can also export the query results for other uses. To do this, click on //Export Results// ([[image:image-20240703104741-4.png||height="22" width="22"]]) in the quick-selection bar. A wizard will open to guide you through the export process. In the first step, select the rows of the datasets to be exported. You can choose from the following options:
56
57 * Export all rows
58 * Export selected rows
59 * Export unselected rows
60
61 Once you have decided on the option, click //Continuing >//. On the following pages, you can specify the export format. Choose between the formats CSV or XML. If you choose the CSV format, you can select additional information. Specify whether the column name should be included or which symbols delimiters are used for the export (comma, semicolon, pipe or tab). These specifications are only required for the CSV format; they are not needed for XML. Then click //Done// and enter a file name and specify the storage location for the file.
62
63 == **Changing Queries and Refining Results** ==
64
65 You can change query results or refine the results and customise them to your requirements. To do this, open the corresponding query and execute it. You can perform sorting in the results grid by moving the columns up and down using drag and drop. You can perform continuing filtering using the drop-down menu of the respective columns. All available values of the query and the column type are listed here, which you can select individually.
66
67 You can also drag the columns into the sort field. The results are grouped by the values above this. It is also possible to display several grouped columns directly. You can use the respective arrow on the right in the field ([[image:image-20240703104924-5.png]]) to display the grouping in ascending or descending order. Sorting is done alphabetically.
68
69 The horizontal tabs are another way of customising the Query Results. These can be used to change the settings that you defined when creating the Query (see the [[Creating Queries>>doc:ACMP.67.ACMP-Solutions.Client-Management.Abfrageverwaltung.Abfragen erstellen.WebHome]] section). The following tabs are available: //Results,// //Fields,// //Filter,// //Security// and //Properties//. You can use these to edit the respective changes for the Query.
70
71 = Open and work with Client Details =
72
73 You can view all the details for a selected client with just one click. The so-called //client details //provide you with information such as general fnformation, specific hardware and software data and assigned profiles.
74
75 You can either open the Client Details directly by double-clicking on a Client in a Query Result, or highlight one or more Clients, right-click to open the context menu and then click on //Open Client Details//.
76
77 The Client Details are always opened as a vertical tab for each respective Client. Each open Client Details tab contains its own machine name as a caption, so that a clear distinction is possible. The Client Details are organised in a tree structure. On the left side of the split window, you will find all categories with the respective query values. As soon as you have clicked on a category, the available values are displayed in the right window area, along with a detailed list of the fields.
78
79 {{aagon.infobox}}
80 If no data is assigned to a field, the empty details are filled in with "not available", for example.
81 {{/aagon.infobox}}
82
83 {{figure}}
84 [[image:66_Abfrageverwaltung_Client Details anzeigen lassen_790.png||data-xwiki-image-style-alignment="center"]]
85
86 {{figureCaption}}
87 Client Details: Machine information
88 {{/figureCaption}}
89 {{/figure}}
90
91 You have a small selection of options via the quick menu:
92
93 |**Symbol**|**Description**
94 |[[image:image-20240703105143-15.png]]|Updates the current window. If you change Clients, fields or filters in an already open Query, it is essential to update it so that the ACMP Server takes the changes into account.
95 |[[image:image-20240703105133-7.png]]|A submenu for managing your Clients will open. In the system selection, you have quick access to the most common query actions.
96 |[[image:image-20240703105148-16.png]]|A submenu for managing Windows Update Actions opens. In this menu, you can make specific changes from Windows Update Management and, among other things, install or uninstall Updates.
97 |[[image:image-20240703105133-9.png]]|Choose action [[Defender Management>>doc:ACMP.67.ACMP-Solutions.Security.Defender Management.WebHome]] if you want to start a Defender Scan or Update via the quick access or assign or remove Configuration Profiles.
98 |[[image:image-20240703105133-10.png]]|You can create and distribute certificates for selected Clients or revoke them via the [[ACMP Gateway>>doc:ACMP.67.ACMP-Solutions.System.Gateway.WebHome]].
99 |[[image:image-20240703105154-17.png]]|You can use [[BitLocker Management>>doc:ACMP.67.ACMP-Solutions.Security.BitLocker Management.WebHome]] to disable BitLocker or change drive passwords on selected Clients. In addition, you can also assign or remove Configuration Profiles.
100 |[[image:image-20240703105158-18.png]]|A submenu opens with all the [[Intune>>doc:ACMP.67.ACMP-Solutions.Client-Management.ACMP Intune Connector.WebHome]]-specific actions that you can execute on a Client..
101 |[[image:image-20240703105204-19.png]]|This opens a wizard for the execution of jobs. This allows you to distribute Client Commands, Job Collections, System Jobs, Managed Software or Windows Update Collections, which are then to be executed on the selected Clients.
102 |[[image:image-20240703105133-14.png]]|(((
103 A submenu opens, in which the most frequently used Client Commands can be found.
104 )))
105
106 == Special feature: Suspicious Clients in the system ==
107
108 If you come across a warning triangle icon in a query while working with ACMP, there are //suspicious //Clients in your system. A suspicious Client is a Client whose Client ID is not unique and is used by at least one other agent. Suspicious Clients can appear in all Client-based queries (e.g. in the containers, Assets or linked tickets).
109
110 {{figure}}
111 [[image:66_ClientManagement_Abfrageverwaltung_Client_Details_1288.png||alt="63_ClientManagement_Abfrageverwaltung_Client_Details_1288.png" data-xwiki-image-style-alignment="center"]]
112
113 {{figureCaption}}
114 Suspicious Client in the Client Details view
115 {{/figureCaption}}
116 {{/figure}}
117
118 If multiple agents use the same Client ID, all these agents save their data under the same dataset in the database. This means that only the values of the last entered Client are displayed in a query. When entering scan data, the computer name is regularly overwritten by the agents. These changes are registered and saved. If a particular computer name is saved at least twice for a Client ID due to this name change, this Client ID is considered a suspicious Client. All computer names previously registered with this ID are then listed in the list of suspicious Clients in the Client Details.
119
120 When you open the Client Details for the suspicious Client, you will be taken automatically to the "Duplicate Client ID" (//Software// > //Computer// > //Duplicate Client ID//) where all previous computer names of the Client ID are listed.
121
122 {{aagon.infobox}}
123 Please note that this menu option is only visible if a suspicious Client has been registered. Otherwise, the list entry does not appear.
124 {{/aagon.infobox}}
125
126 {{figure}}
127 [[image:11b_64_ClientManagement_Abfrageverwaltung_Client_Details_DoppelteClientID_1290.png||alt="63_ClientManagement_Abfrageverwaltung_Client_Details_DoppelteClientID_1290.png" data-xwiki-image-style-alignment="center"]]
128
129 {{figureCaption}}
130 Client Details - Duplicate Client ID
131 {{/figureCaption}}
132 {{/figure}}
133
134 You can select one or more entries directly from the Client Details and execute a new installation of the agent with a new Client ID on the computers of the agents to remove the suspicious Clients. The correction causes the entries to disappear from the list of Client IDs and the system no longer registers them as ‘suspicious’.
135
136 You can use the display field //"Is a candidate for a duplicate ClientID"// to build targeted Queries that automatically notify you of the occurrence of //suspicious //Clients.
137
138 == Tree structure of the Client Details ==
139
140 You can use the tree structure to display individual areas of the Client. These are accessible via the Client Details. This allows you to retrieve the dates without having to create a new Query. In addition, hardware and software-specific data can be retrieved, which provides you with certain information.
141
142
143 |**Area**|**Description**
144 |**ACMP Gateway**|In this section, you can check the Client certificates assigned for the ACMP Gateway and see which ones are in use. If you have assigned a certificate to the Client, you can also see the validity period, the status and the serial number from the entry.
145 |**Asset Management**|In this area, you can create an Asset, edit an existing Asset or remove a Shortcut from the current Client, provided you have valid licenses for ACMP Asset Management.
146 |**Custom fields**|(((
147 All user-defined dates are stored in this area. These include custom fields, documents and Master Data.
148
149 |Custom fields|(((
150 All the fields you have defined are displayed here with the respective values. You have the option to customise the values. To apply your changes, click on //Save.//
151 )))
152 |Documents|All documents linked to the Client are displayed. You can, for example, change the descriptions of the document or add or delete a document link.
153 |Master dara|In the Master Data section, you can store the Master Data for the selected Client. If you click on one of the fields, a small window will open in which you can select, edit, add and delete existing Master Data.
154 )))
155 |**Client Commands**|(((
156 This area shows Client Command information that affects the Client.
157
158 |Attached files|All files that have been added as Client Commands are displayed. Various actions are available to you.
159 |Logs|All log files of Client Commands executed on this Client are stored here. This requires activated logging for the Client Commands in order to also delete or save the logs.
160 )))
161 |**Hardware**|(((
162 This section provides a quick overview of the inventoried data of the Client, which is divided into the categories of computer, drives and mainboard. It is not possible to customise the data.
163
164 {{aagon.infobox}}
165 You can find all hard drive values for S.M.A.R.T under //Hardware// > //Drives// > //Hard Drives//.
166 {{/aagon.infobox}}
167 )))
168 |**Helpdesk**|(((
169 This view lists all Helpdesk tickets for the Client. You can choose whether //all tickets// or //only open tickets// are displayed.
170 )))
171 |**Contacts**|Contacts linked to the Client are displayed here, where you can add, delete or reset shortcuts.
172 |**Licence Managament**|This section shows you which licences are being used by the Client. It is not possible to customise this.
173 |**Managed Software**|This entry allows you to display the Managed Software of this Client and manage items.
174 |**Mobile Device Management**|This is where you can find information about the inventoried mobile device. It provides general information as well as specific information about the hardware, the SIM card or the network.
175 |**Software**|This section contains all the information about the software available on the Client. For this purpose, details about the operating system, the computer and the installed software are displayed. The OS Deployment section provides you with an overview of the assigned values, while the Security section can be used to display vulnerabilities and the BitLocker and Defender Management.
176 |**Virtualization**|(((
177 In this area, you can set the virtualisation options for the selected Client.
178
179 In the upper area, you determine whether the Client is running //on a physical host// or //in a virtual machine//. These are then displayed in an overview and can be marked as backup or failover. The lower area allows you to define in which virtual machines the Client is running. The information is automatically filled in by the //VMware vSphere scanner //if you have configured this in the settings (//Settings// > //ACMP// //Server// > //Virtualisation//).
180 )))
181 |**Windows Update Inventory**|(((
182 In this area, you can view the Windows Updates that are //installed and available //for the Client, as well as the Windows Update Logs.
183
184 {{aagon.infobox}}
185 If the Client is managed by ACMP, you will see the management options in the Windows Update Management category.
186 {{/aagon.infobox}}
187
188 The //Windows Update Logs //are logged in full so that you can also view them. You can use the options to save or delete these logs.
189 )))
190 |**Windows Update Management**|(((
191 In this section, you can have ACMP manage Windows Updates. The //already installed//,// not installed //and// failed updates //are displayed. You can also specify whether declined updates should be hidden or displayed. You have the option to update the log files (//install selected updates//) or delete them (//uninstall selected updates//).
192 )))
© Aagon GmbH 2025
Besuchen Sie unsere neue Aagon-Community