cancel
Showing results for 
Search instead for 
Did you mean: 
jogvan
Level 10
Report Inappropriate Content
Message 1 of 6

How to detect machines without agent

What is the best way to get an overview of, which machines that do not have the McAfee Agent 4.0 installed?

Is it possible to get this overview in ePO 4.0?
5 Replies
Johonn
Level 7
Report Inappropriate Content
Message 2 of 6

RE: How to detect machines without agent

Copy and paste the code below into a XML file and import it into your queries and modify to your liking for the output.


File Name: Query_Managed_Systems_By_Agent_Version.xml


<queries>
<query>
<name language="en">Managed_Systems_By_Agent_Versions</name>
<description language="en">This Query shows managed systems by Agent Versions</description>
<property name="target">EPOLeafNode</property>
<property name="tableURI">query:table?orion.table.columns=EPOLeafNode.NodeName&amp;orion.table.order.by=EPOLeafNode.NodeName&amp;orion.table.order=az</property>
<property name="conditionURI">query:condition?orion.condition.sexp=</property>
<property name="summaryURI">query:summary?pie.slice.title=EPOLeafNode.AgentVersion&amp;orion.show.other.limit=0&amp;orion.sum.order.by=count&amp;orion.show.other=false&amp;orion.sum.time.cols=false&amp;orion.sum.aggregation.column=count&amp;orion.sum.group.by=EPOLeafNode.AgentVersion&amp;orion.sum.aggregation=count&amp;orion.sum.order=desc&amp;orion.sum.limit.count=0&amp;orion.chart.type=pie&amp;orion.sum.limit=false&amp;orion.sum.query=true</property>
</query>
</queries>
jogvan
Level 10
Report Inappropriate Content
Message 3 of 6

RE: How to detect machines without agent

When I import the xml file, I get this error message:

The query could not be imported because the uploaded file is either corrupt or in an unexpected format. Click "OK" to return to the "Queries" page.
Highlighted

RE: How to detect machines without agent

Copy this code into a xml file and import it into your queries.
This query shows all managed computer without agent 4.0.0.1180.
You can also edit this query for your own options.


<queries><query>
<name language="en">Agents, who are not 4.0.0.1180</name>
<description language="en"></description>
<property name="target">EPOLeafNode</property>
<property name="tableURI">query:table?orion.table.columns=EPOLeafNode.NodeName%3AEPOLeafNode.AgentVersion%3AEPOComputerProperties.OSType%3AEPOProdPropsView_VIRUSCAN.productversion%3AEPOProdPropsView_VIRUSCAN.enginever%3AEPOProdPropsView_VIRUSCAN.datver&amp;orion.table.order=az&amp;orion.table.order.by=EPOLeafNode.NodeName%3AEPOLeafNode.AgentVersion%3AEPOComputerProperties.OSType%3AEPOProdPropsView_VIRUSCAN.productversion%3AEPOProdPropsView_VIRUSCAN.enginever%3AEPOProdPropsView_VIRUSCAN.datver</property>
<property name="conditionURI">query:condition?orion.condition.sexp=%28+where+%28+and+%28+startsWith+EPOLeafNode.AgentVersion+%224%22+%29+%28+newerThan+EPOLeafNode.LastUpdate+86400000++%29+%28+not_withinRepositoryDatVersion+EPOProdPropsView_VIRUSCAN.datver+3++%29+%28+or+%28+eq+EPOComputerProperties.OSType+%22Windows+XP%22+%29+%28+eq+EPOComputerProperties.OSType+%22Windows+Vista%22+%29+%29+%29+%29</property>
<property name="summaryURI">query:summary?orion.chart.type=table&amp;orion.sum.query=false</property></query></queries>
Johonn
Level 7
Report Inappropriate Content
Message 5 of 6

RE: How to detect machines without agent

Interesting copy <queries>....<queries> into an XML should work but try DanielS and let us know. Other wise we walk you through it.
jogvan
Level 10
Report Inappropriate Content
Message 6 of 6

RE: How to detect machines without agent

Rebooting ePO server solved the issue.

Thanks happy
More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community