Software Management Group

Is it possible to view the logs on a manged software delivery policy (without building a custom SQL report)?

Like X policy ran on these 60 computers today, and it was successful on 58 of them and failed on 2, where ideally I could click on the 2 failures and see some info on what happened?

Right now, the best indication I have that the policy is doing what I want is watching the filter the policy is applied to (Computer Doesn't have X software) decrease.  I realized about 50 computers have not been installing properly, and they are machines I can't connect via RAAD to for network reasons, so I'd love to get some more info in the web interface.
 

I'm 7.5.1 right now, looking to upgrade to 7.6.x in next few weeks.

I think the only NS report that will help will be the [Reports > Software > Delivery >] Execution Attempts.report. It will give the return code and a Return Code description from {Settings > Software > Software Catalog and Software Library >] Installation Error code descriptions. I add to these every time I find and investigate a new one. For more detail I browse to the c$ share of the PC and log files are usually in c:\windows\temp unless you've run the install as a user account.

@andykn101 - thanks.  Coming from our mac management system (where 90% of my machines are), this seems like going back to the dark ages & not intuitive at all.  Navigating to local files isn't possible for us for privacy reasons.

"Run script" task to copy log files back to the NS? The Resource Manager for each PC in the Symantec Console will also have a copy of the execution record. View > Events > Computer Events > AeX SWD Execution.

Her is a verision of a report i run every once in a while based on tasks - If i know the centeral task in the policy i run this one 

select 

Right(LEft (vctask.name,3),2) as 'Location Code',
vctask.Name as 'Site Server Name',
vc.name 'Pushed To',
    TIE.ExecutedBy,
    TIE.TaskName,
          eti._eventTime,
      eti.StartTime,eti.EndTime,
           DateDIFF (minute , eti.starttime, eti.endtime) as  'Min',
         eti.InstanceStatus, eti.Success, eti.Result
from [TaskInstanceParents] TIP
join TaskInstanceExecutionInfo TIE
    on TIE.TaskInstanceGuid = TIP.ParentTaskInstanceGuid
join Evt_Task_Instances ETI
    on ETI.TaskInstanceGuid = TIP.TaskInstanceGuid
left join vComputer vc
    on vc.Guid = ETI._ResourceGuid
    left join Inv_Client_Task_Servers cts 
    on cts.ClientTaskServerGuid = eti.TaskServerGuid
    left join vComputer vctask on vctask.Guid = cts.ClientTaskServerGuid
    
   where eti.StartTime > GETDATE ()-90
   and TIE.TaskName like '%enter Task Name%'

    order by _eventTime desc

A version to find software advertistments that have failed - assuming return code 0 is a  failure. Which is not always true 

 

select distinct ac.name, swd._ResourceGuid, swd.[packageName], swd.ReturnCode
 from dbo.Inv_AeX_AC_Identification ac  
 inner join evt_AeX_SWD_Execution swd on ac._ResourceGuid = swd._ResourceGuid
 
where swd.AdvertisementName like '%enter advertistment name%'
and swd.ReturnCode =0

Thanks all.  The return codes I'm seeing are all over the place.  I think I figured out why the one policy was failing, hoping to see improvements over the next few days at least for this one policy.  

I just wish basic logging/reporting was so much easier in CMS.  It seems like it would make sense a sysadmin would want to know if a policy was successful or not with links to failures.

The patch remediation center usually gives me what I need for patches.  If a certain patch didn't quickly get up to 80-90% installed, it would be an indication for me to look into it.  For managed policies, I don't have that easily handy.

Attached is a pic from a dashboard for our Mac management console that gives me a window into what is or isn't working across multiple policies with easy links to look at errors.  I wish Symantec would move towards something simpler like this.  Unfortunately, I'll never have time to be a sql pro like some of you guys.    

 

 

You can go to Manage > Computers, select a filter and then click the double right arrow at the top of the computers list to check compliance of that filter against all the Polices applying to those PCs. You can then select a Policy, once the Polices pane comes up to show it you can right click on it and select Reports > Software Execution Report. The software execution report should tell you all you need to know about failures if you've populated your [Settings > Software > Software Catalog and Software Library >] Installation Error code descriptions

@andykn101 - thanks again.  the "double right arrow at the top of the computers list to check compliance of that filter against all the Polices applying to those PCs" - any idea if that's 7.6 feature?  When I click on those arrows I'm not seeing any tie in with policies just add criteria/list.  I know 7.6 had some improvements with filters and such.

for me if I schedule machines to get a software package... I do not care if some did not go as they will when the machine is powered on. I have a report that goes out daily that is a <> Success last day report. Next day I go through it where any installation failed and I remediate from there...