Some tags disappearing after query is run

[cgillett]

Brief: tags applied to a certain group disappear after a simple query is performed. I have 98 endpoints tagged with "VDI" in my system tree, under a sub-category called VDI. The tags apply ok, and show up in my System Tree when viewed. Everything is working up to this point. However, immediately after I run a Server Task to perform a query (which checks out any Unmanaged systems,) the tags disappear and they show up in my report, which I don't want.

[cdinet]

Are you sure the query isn't pulling a duplicate, unmanaged entry of the system?  

[cgillett]

Hi cdinet, thanks for your reply. I checked the system tree and no duplicates exist elsewhere. 

I even went as far as creating a brand new tag and assigning it to the machines using a criteria. Same thing - it applies the tag, and it stays there until I run my query. The moment the query starts, the tag disappears.

Thanks,

Chris

[cdinet]

A query would not change any tagging, it only is a select statement, so something else must be occurring.  How is the tag applied?  Manually or via criteria?  Is the query run via server task and if so, any sub actions?  Does the system appearing as unmanaged occur after an AD sync, or is this system on vpn?  A little more detail might be helpful on exactly what is occurring.  If this is a VDI system, is the agent installed in vdi mode?  Are you running MOVE on those vm's and if so, does this occur when systems are synced with vcenter?

[cgillett]

The tag is applied via criteria - anything that starts with "COTVDI" is applied with the "VDI" tag.

The query is run as a Server Task; it performs a sub-task of excluding certain results. I do this because I don't want "VDI" tags in my query results (I'm only looking for physical workstations.) I thought the issue was related to the Exclude Tags sub-task, so I removed the sub-task. Now it doesn't exclude any tags at all. I run the query and the same thing happens - the tags for "VDI" get removed.

There is no agent installed on these machines, not currently running MOVE yet either. 

[cdinet · Accepted solution]

I really don't see how a simple query can remove a tag, it just doesn't work like that.  So the question would be then, if you go to that tag and apply the tag based on criteria, does the tag get re-applied?  I would suggest opening a ticket with McAfee, as there is something else that we aren't seeing.  

[cgillett]

I've initiated a service request from McAfee. Thanks.