1 2 Previous Next 10 Replies Latest reply on Aug 17, 2012 3:19 AM by Nielsb

    Query for Extra.DAT Adoption Rate

      Does anyone know how to create a query to determine the adoption rate of machines in your environment with an extra.DAT?


      I have had success with tracking the adoption rate of the normal DAT using a boolean query type and setting the configuration criteria by using:



      Property                                                      Comparison                                        Value

      DAT Version (VirusScan Enterprise)    Is within X versions of repository          = 3


      I cannot find a way to report on the extra.DAT, however. Any help is greatly appreciated.


        • 1. Re: Query for Extra.DAT Adoption Rate

          Can't access my EPO server now, but I have exactly that query (it's a dashboard).


          Extra.dat name is available, and I basically have a summed table that rolls it up showing extra.dat name and number of clients with that extra.dat


          If no-one else provides an answer, hopefully will have the details tomorrow.

          • 2. Re: Query for Extra.DAT Adoption Rate

            My extra dat query:

            extra dat deployment.PNG


            Save as xml file and import the query:




              <name language="sv">VSE: Extra DAT Deployment</name>

              <description language="sv">Displays the highest Extra DAT versions, and a slice for all the other versions.</description>

              <property name="target">EPOLeafNode</property>

              <property name="tableURI">query:table?orion.table.columns=EPOComputerProperties.ComputerN ame%3AEPOComputerProperties.DomainName%3AEPOLeafNode.os%3AEPOComputerProperties. Description%3AEPOLeafNode.Tags%3AEPOProdPropsView_VIRUSCAN.productversion%3AEPOP rodPropsView_VIRUSCAN.hotfix%3AEPOProdPropsView_VIRUSCAN.servicepack%3AEPOProdPr opsView_VIRUSCAN.enginever%3AEPOProdPropsView_VIRUSCAN.enginever64%3AEPOProdProp sView_VIRUSCAN.datver%3AEPOLeafNode.LastUpdate&amp;orion.table.order.by=EPOCompu terProperties.ComputerName%3AEPOComputerProperties.DomainName%3AEPOLeafNode.os%3 AEPOComputerProperties.Description%3AEPOLeafNode.Tags%3AEPOProdPropsView_VIRUSCA N.productversion%3AEPOProdPropsView_VIRUSCAN.hotfix%3AEPOProdPropsView_VIRUSCAN. servicepack%3AEPOProdPropsView_VIRUSCAN.enginever%3AEPOProdPropsView_VIRUSCAN.en ginever64%3AEPOProdPropsView_VIRUSCAN.datver%3AEPOLeafNode.LastUpdate&amp;orion. table.order=az</property>

              <property name="conditionURI">query:condition?orion.condition.sexp=%28+where+%28+version_ ge+EPOProdPropsView_VIRUSCAN.productversion+%228%22+%29+%29</property>

              <property name="summaryURI">query:summary?pie.slice.title=EPOProdPropsView_VIRUSCAN.datve r&amp;pie.count.title=EPOLeafNode&amp;orion.query.type=pie.pie&amp;orion.sum.que ry=true&amp;show.percentage=false&amp;orion.sum.group.by=EPOProdPropsView_VIRUSC AN.extradatnames&amp;orion.sum.order=desc&amp;orion.sum.limit.count=360&amp;orio n.show.other=true&amp;orion.sum.aggregation=count&amp;orion.sum.aggregation.show Total=true</property>



            1 of 1 people found this helpful
            • 3. Re: Query for Extra.DAT Adoption Rate

              Something I fogot to mention earler is that this is for ePO 4.6 patch 1.


              I am not having success with that query in this environment, but it does appear to work in ePO 4.5 patch 3. I looks like the value for Extra.DAT was removed between those versions.


              ePO 4.5 VSE Properties:



              ePO 4.6 VSE Properties:



              If I can see the information the in VSE console, I should be able to report on it. C'mon McAfee!


              Message was edited by: waynediesel on 6/7/12 10:32:50 AM CDT
              1 of 1 people found this helpful
              • 4. Re: Query for Extra.DAT Adoption Rate

                All -


                After some more digging around, I was able to find the solution to this.


                Under Menu -> Software -> Extensions -> I had to remove the "VirusScan Enterprise Reports" package. I then went to my product download page and re-downloaded the VSE 8.8 patch 1 repost that contained an updated version of "VirusScan Enterprise Reports". This allowed me to report on the extra.DAT in ePO 4.6.1 finally.


                With that updated reports extension, I was successfully able to run the query listed above by Nielsb.

                • 5. Re: Query for Extra.DAT Adoption Rate

                  My extra.dat query:


                  - <queries>

                  - <query>

                  <name language="en">Extra Dat Deployment</name>

                  <description language="en" />

                  <property name="target">EPOLeafNode</property>

                  <property name="tableURI">query:table?orion.table.columns=EPOLeafNode.LastUpdate%3AEPOLeafNode.NodeName%3A EPOProdPropsView_VIRUSCAN.extradatnames&orion.table.order.by=EPOLeafNode.LastUpd ate%3AEPOLeafNode.NodeName%3AEPOProdPropsView_VIRUSCAN.extradatnames&orion.table .order=az</property>

                  <property name="conditionURI">query:condition?orion.condition.sexp=</property>

                  <property name="summaryURI">query:summary?orion.sum.query=true&orion.query.type=summary.topn&orion.sum.group .by=EPOProdPropsView_VIRUSCAN.extradatnames&orion.sum.order=desc&orion.sum.aggre gation=count&orion.sum.aggregation.showTotal=true</property>





                  • 6. Re: Query for Extra.DAT Adoption Rate

                    Hi all,


                    ¿does somebody know what´s the difference between the N/A and a "blank space" when reporting the superdat version?



                    • 7. Re: Query for Extra.DAT Adoption Rate

                      Different point products.


                      VSE will generally show N/A, but in my environment LinuxShield shows Blank. Also clients that only have the agent and no VSE show blank too.

                      • 8. Re: Query for Extra.DAT Adoption Rate
                        Hemant Koli

                        Hello Nielsb,


                        I tried copying & save ti as xml & then tried to import, but i got error as "An unexpected error ocured"

                        • 9. Re: Query for Extra.DAT Adoption Rate
                          Hemant Koli

                          Hello Waynediesel.


                          I tried the same thing & it helped me too...........



                          1 2 Previous Next