Endpoint Protection

Hello,

How can I search a field using SEPM's "Search Clients" tool, when the value I'm looking for is null.

I want to search for all computers that have nothing entered in their "Description" field in SEPM.  I currently use this field to enter the computer model name (ie Latitude 5530, Optiplex 790, etc).  Not wanting to touch every single computer entry to see if the field has been filled in, I want to only see those computers where "Description" field is blank.

I've tried "Description" = "null" -  SEPM gives error "please enter a value in field"

I've tried "Description" = (did not enter anything) -  SEPM gives error "please enter a value in field"

I've tried "Description" != "*" -  SEPM returns all computers

I've tried "Description" != "optiplex" -  SEPM returns all computers

I've tried "Description" != "optiplex*" -  SEPM returns all computers

I've tried "Description" != "optiplex%" -  SEPM returns all computers

Suggestions would be appreciated

Try "Description" "LIKE" "%%"

That returns all computers as well.  I don't want to find all computers that DO have an entry, only those that do not - are blank.

I did notice that I can't even do a partial search in this field.  For example, I can partial search on values in the COMPUTER NAME field.  Our Computer Names have service tags. I can enter a partial service tag in the value when searching on Computer Name ...

Search field = "Computer Name"

Comparison = "LIKE"

Value = "WT1"

That will return all computers that have "WT1 anywhere within the computer name field.  However, I have to enter exact information for the "Description" field.

Search Field = "Description"

Comparison = " != "

Value = "Optiplex 755"

This search will remove all Optiplex 755 from the original all computers.  having any other form or abbreviation will not resolve the search for "Optiplex 755".

Interesting.

I know what you're asking for but the problem, I believe, is that the SEPM is limited in this regard and for whatever reason returning funky results. Without seeing the logic behind it though, I am unsure. You may want to check with support. In past experiences this is a limitation and therefore not possible.

I feared as much.

Another in a long line of limitations.

Thanks as always Brian

Glad to help

take care

The "Search Computer" form is a frontend for database searches. If it does not fulfill your wishes, you could try to query the database directly. Something like this should work:

SELECT COMPUTER_NAME, DESCRIPTION FROM SEM_CLIENT WHERE DESCRIPTION = ''

If you are using an embedded database, you can use the dbisqlc.exe tool in the SEPM\ASA\win32 folder. User is dba, password is your initial admin password from installing SEPM.

Oh, right.  Thanks Greg12.  I figured that since Symantec put in a "like" and a "not like" that those search terms would actually work.