string
Strings are typically core objects, but some string inspectors may be client-specific. Note: A string literal is written within double quotes. Special characters must be inserted by using the percent sign followed by 2 hex digits. Special characters include those characters with ASCII codes less than the 'space' character (hex 20) or greater than 'tilde' character (hex 7f) as well as the percent character itself (25 hex). For example, to create a string containing a null character and a percent character use "a null is %00, the percent itself is %25". Conversion to upper and lower case is also provided. String works in combination with the string position and substring data types. A string position is a point within a string. It can be compared to an integer, but it also acts as a pointer within a string so that the preceding and following text can be extracted. A substring is a part of a larger string. All operations allowed on a string can be performed on a substring. There are two substrings "be" in the string "To be or not to be". The substrings only differ in their positions within the string.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Session, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Creation
The architecture represents the CPU type that the RPM Package was designed to be used on. Typical values are i386, i686, or x86_64, but packages can be created with archtectures like 'noarch' or have no architecture specified at all.Example: architecture of package "BESAgent" of rpm - On a SuSE Linux Enterprise Server 9.0, 64 bit, this will return x86_64, while on a Fedora Core 3, 32 bit, it will return i386.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Red Hat, SUSE |
| 8.2.1078.0 | AIX |
| 9.2.6.94 | CentOS |
| 9.5.0.311 | Oracle Enterprise Linux |
| 10.0.0.133 | Amazon Linux 2 |
Returns the base distinguished name of the Identity Provider Directory as a string. It exists only for LDAP identity providers.
- Q: base distinguished name of bes idp directory whose( id of it = 65 )
- A: dc=bigfix,dc=com
| Version | Platforms |
|---|---|
| 11.0.2.0 | Session |
As of version 7.2, the BES Console can be branded by third parties who want to use the engine to deliver specific content. This inspector returns a string that identifies any branding associated with the BES Console. The unbranded Console returns 'bigfix', but other third-party brands may result.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
Returns a string corresponding to the build number of the OS.
- Q: (build of it, name of it) of operating system
- A: Darwin Kernel Version 14.1.0: Thu Feb 26 19:26:47 PST 2015; root:xnu-2782.10.73~1/RELEASE_X86_64, Mac OS X
- Q: (build of it, name of it) of operating system
- A: #58-Ubuntu SMP Tue Jul 29 16:45:05 UTC 2014, Linux Ubuntu 14.04.1 LTS
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris |
| 8.1.535.0 | Debian, Ubuntu |
| 9.0.586.0 | Windows |
| 9.5.13.130 | Raspbian |
A cidr string (see CIDR_notation at Wikipedia) is a string representation of a cidr address. It looks like an ip address followed by a slash and then the number of leading non-zero bits of the routing prefix. For example, 192.168.0.0/16 for IPv4, and 2001:db8::/32 for IPv6.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the client id of the specified Identity Provider Directory as a string. It exists only for Microsoft Entra ID identity providers.
- Q: client id of bes idp directory whose( id of it = 65 )
- A: 64g6d777-8934-6d52-2gt3-hvch83829hf87
| Version | Platforms |
|---|---|
| 11.0.2.0 | Session |
Returns the client product name for a specific agent interface, for example:
- Q: client product of agent interface "EDR" of client
- A: EDR
If that specific agent interface does not exist, the inspector returns "Singular expression refers to nonexistent object".
The plural returns client product names for all the agent interfaces:
- Q: client products of agent interfaces of client
- A: EDR
- A: DEV
| Version | Platforms |
|---|---|
| 9.5.5.193 | Windows |
| 9.5.7.90 | Mac |
Returns a string that corresponds to the codename of the given release. For example, Ubuntu 8.04 has the codename of 'hardy'.
- Q: (codename of it, name of it) of operating system
- A: trusty, Linux Ubuntu 14.04.1 LTS
| Version | Platforms |
|---|---|
| 8.1.535.0 | AIX, Debian, HP-UX, Red Hat, SUSE, Solaris, Ubuntu |
| 9.5.5.193 | Mac |
| 9.5.13.130 | Raspbian |
A string representation of the codepage portion of the id of this version block. See notes for known codepage strings. For example, 'Unicode'.Example: codepage of only version block of regapp "bigfix.exe" is "Unicode" - Returns True if the version block codepage for the specified file is unicode.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
This inspector returns a string formatted using the ConvertSidToStringSid function.
- Q: component string of owner of security descriptor of windows folder
- A: S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
| 8.1.535.0 | Mac |
Returns the Corrective Service Disk version of the operating system. This is the szCSDVersion as returned by the GetVersionEx function. The format varies depending on the installed service packs. For WinNT it contains a string such as 'Service Pack 3', for Win95 it can contain a string such as 'B'.
- Q: (csd version of it, name of it) of operating system
- A: , Win8.1
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
Get, from a dictionary, the string keyed by the specified string. Works for objects in a dictionary of type String or Data. If the type is Data, any null terminator will be stripped.Example: string "device_type" of dictionary of node "cpus/CPU0@0" of devicetree plane of iokit registry - Returns a null terminated string from the specified data field, such as 'processor%00'.Example: cstring "device_type" of dictionary of node "cpus/CPU0@0" of devicetree plane of iokit registry - Returns 'processor', stripping off the final null from the specified data field.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Mac |
Returns the type of the device (desktop, laptop or server, in case of VMWare virtual systems). The evaluation is determined by the hardware installed, not by the operating system definitions. The result is returned by the WMI, if it is active on the device, otherwise it is determined by the type of battery installed on the device.
| Version | Platforms |
|---|---|
| 9.5.2.56 | Windows |
Returns the OS name in a human readable format following different rules for each OS.
On Windows, it returns the value in the ProductName key.
Example of QnA ran on Windows.
- Q: display name of operating system
- A: Windows Server 2022 Datacenter
On Unix systems, it returns the value of the PRETTY_NAME key in the os-release file.
Example of QnA ran on Linux.
- Q: display name of operating system
- A: Oracle Linux Server 7.8
On Mac, it returns the macOS codename.
Example of QnA ran on macOS.
- Q: display name of operating system
- A: macOS Monterey
| Version | Platforms |
|---|---|
| 11.0.2.0 | AIX, Debian, Mac, Raspbian, Red Hat, Solaris, SUSE, Ubuntu, Windows |
Returns the Windows operating system version. This inspector returns valid information only on Windows 10 20H2 and later Windows 10 versions. Running this inspector on other Windows operating systems results in an error referring to a nonexistent object.
Running the inspector on Windows 10, OS Build 19042.928:
- Q: display version of operating system
- A: 20H2
| Version | Platforms |
|---|---|
| 10.0.3.0 | Windows |
Returns the unique elements of the specified <string set>, removing duplicates and sorting by value.Example: elements of set of ("beta";"beta";"alpha";"gamma";"beta") - Returns the strings alpha, beta, gamma.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Session, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the encoding of the database. This is determined using PRAGMA encoding.
The returned string can be either UTF-8, UTF-16le (little-endian UTF-16 encoding) or UTF-16be (big-endian UTF-16 encoding).
- Q: encoding of sqlite database of file "test.db"
- A: UTF-8
| Version | Platforms |
|---|---|
| 9.0.586.0 | AIX, Debian, HP-UX, Mac, Red Hat, SUSE, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
Returns a string of the encryption type of the WiFi connection. eg: "WEP", "WPA2-PSK"
- Q: (name of it, secured of it, encryption of it) of current networks of wifis of adapters of network
- A: awdl0, False, Unsecured
- T: 34570
| Version | Platforms |
|---|---|
| 9.0.586.0 | Windows |
| 9.5.3.211 | Mac |
Gets the value of the ExcludedInterfaces property from the specified firewall profile. This property contains the list of interfaces excluded from a the profile's firewall rules. For more information, see the MSDN Library entry for INetFwPolicy2.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
Returns the name of the interface family. There are about 35 of these, but the most common is AF_INET, or normal IP interface. AF_LINK is used for wifi devices and AF_INET6 is for IP v6 addresses. There are specific inspectors for AF_INET (ip interface) and AF_LINK (link interface). The family name of inspector returns this type as a string corresponding to the #define value in the header file.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Mac |
Returns the error message returned by the cryptographic library if the application (the client, console, or web reports, depending on the context) tried to enter FIPS 140-2 compliant mode and failed.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Session, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
This inspector returns one of the following hypervisors:
- "Google Cloud Engine"
- "Hyper-V"
- "KVM"
- "QEMU"
- "VIOS"
- "VMware"
- "VirtualBox"
- "Xen"
Running this inspector on an operating system with a different hypervisor or without an hypervisor results in an error referring to a nonexistent object.
| Version | Platforms |
|---|---|
| 9.5.3.211 | Windows |
| 9.5.7.90 | Debian, Red Hat, SUSE, Solaris, Ubuntu |
Retrieves the IcmpTypesAndCodes property for the specified firewall rule. The firewall rule inspectors are wrappers around the Windows Vista Firewall API. For more information, see the MSDN library for INetFwRule.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
A string representation containing both the language and codepage of this version block. The format is 8 hex digits, 4 of the codepage concatenated with 4 of the language. For example, '040904b0'. See notes for known values.Example: id of only version block of regapp "bigfix.exe" is "040904b0" - Returns True if the given file's version block id is the specified string.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
Returns the full path to the executable file that represents the instance of the specified application.
Note: On AIX systems this inspector always returns the error 'expression refers to nonexistent object' because the application path is not available on that platform.
| Version | Platforms |
|---|---|
| 9.5.5.193 | AIX, Debian, Mac, Red Hat, SUSE, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
Returns the names of the indexes on the table. This is determined by using:
SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ?For example:
- Q: indices of table "Album" of sqlite database of file "chinook.db"
- A: IPK_Album
- A: IFK_AlbumArtistId
| Version | Platforms |
|---|---|
| 9.0.586.0 | AIX, Debian, HP-UX, Mac, Red Hat, SUSE, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
Returns the name of the entity that signed and issued the certificate. The issuer contains a non-empty distinguished name (DN).
For example, "C=US, ST=California, O=John Doe".
| Version | Platforms |
|---|---|
| 9.5.7.90 | AIX, Debian, Mac, Red Hat, SUSE, Session, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
Returns a key and its value from the given structured text file. It iterates over lines that start with the key name (as specified by <string>) followed by an = or : character. When searching, white space is ignored.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
The keys of a dictionary.Example: keys of global dictionary of bundle of folder "iTunes.app" of applications folder - Returns a list of the specified keys, for example: CFBundlePackageType, CFBundleVersion, CFBundleHelpBookName, CFBundleName, CSResourcesFileMapped, LSMulitpleInstancesProhibted, CFBundleDocumentTypes, etc....
| Version | Platforms |
|---|---|
| 8.0.584.0 | Mac |
Returns the label of the specified logical volume. If the logical volume contains a filesystem, then then this will be the full pathname of the mount point of the file system, eg. "/home".Example: label of logical volume "splat" of volume group "dave" of logical volume manager - Returns the label associated with the specified logical volume, such as "/splat_mount_point".
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX |
A string representation of the language portion of the id of this version block. For example, 'English (United States)'. See notes for known values.Example: language of version block 1 of regapp "bigfix.exe" = "English (United States)" - Returns True if the given file's version block language is as specified.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
Returns a <string> that can be embedded into an <A> tag that, when clicked, will open the given action's document (in the BES Console) or description page (in Web Reports). Note that link href returns a normal string, not an HTML string.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
The link href property does not return an <A> tag but rather returns the value of the href attribute of the <A> tag that would be constructed by the other link inspectors. This allows you to create more flexible linking formats. (See link of <bes computer>). Note that link href returns a string, not an HTML string.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
The link href property does not return an <A> tag but rather returns the value of the href attribute of the <A> tag that would be constructed by the other link inspectors. This allows you to create more flexible linking formats. (See link of <bes fixlet>). Note that link href returns a normal string, not an HTML string.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
The link href property does not return an <A> tag but rather returns the value of the href attribute of the <A> tag that would be constructed by the other link inspectors. This allows you to create more flexible linking formats. (See link of <bes unmanaged asset>). Note that link href returns a normal string, not an HTML string.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
The link href property does not return an <A> tag but rather returns the value of the href attribute of the <A> tag that would be constructed by the other link inspectors. This allows you to create more flexible linking formats. (See link of <bes user>). Note that link href returns a normal string, not an HTML string.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
The link href property does not return an <A> tag but rather returns the value of the href attribute of the <A> tag that would be constructed by the other link inspectors. This allows you to create more flexible linking formats. (See link of <bes wizard>). Notice that link href returns a normal string, not an HTML string.Note: This is a Console-only inspector.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
Returns a key and its value from the given structured text file that might be locked because it is concurrently opened for writing by another application. It iterates over lines that start with the key name (as specified by <string>) followed by an = or : character. When searching, white space is ignored.
You are supposed to use this inspector to access files that are only being appended to, such as log files, because the files can be changed while the inspector reads them. Otherwise the results can be unpredictable.
This inspector cannot read all kinds of locked files. It fails to open a file if another application has opened the file in an exclusive mode, that is, without allowing others to read the file.
The inspector does not override the access mode or the sharing flag specified to open the file by another application.
| Version | Platforms |
|---|---|
| 9.5.7.90 | AIX, Debian, Mac, Red Hat, SUSE, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
The long name of the client process owner.Example: long name of process owner of client - OS X usernames typically have a long and a short form. For a properly installed Agent, long name of process owner of client should return the same as short name, namely 'root'.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Mac |
Licensed Program Product(s) of the fileset.Example: (lpp_name of it & " ver = " & version of it as string) of filesets matching "lpp_name = 'bos.terminfo.rte'" of object repository - Returns a formatted list of filesets with the specified Licensed Program Product name.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX |
Returns the MAC address (AKA hardware address) of the network ip interface object. The mac address is formatted as a string of lower case hex digits separated by '-'.Example: mac address whose (it = "00-61-b1-d1-7d-29") of ip interfaces of network - Returns the mac address of the specified network ip interface object.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the MAC address of the specified network link interface.Example: mac addresses of link interfaces of network - Returns a list of the MAC addresses of the network link interfaces, for example, 00-14-c8-3a-82-11, 00-16-bc-72-2c-57, 00-14-e4-26-fe-4c-14-37, etcetera.Example: mac address of link interface (whose name of it is "fw0") of network - Returns the MAC address of the specified network link interface.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Mac |
Returns the name of a specific capability of a specific agent interface. For example:
- Q: name of capability "kill process" of agent interface "EDR" of client
- A: kill process
The plural returns the names of the capabilities for a specific agent interface:
- Q: names of capabilities of agent interface "EDR" of client
- A: quarantine
- A: delete registry value
- A: kill process
- A: quarantine file
- A: update registry value
| Version | Platforms |
|---|---|
| 9.5.5.193 | Windows |
| 9.5.7.90 | Mac |
Returns the name of the specified audit policy subcategory.Example: names of subcategories of category whose (name of it is "System") of audit policy - Returns the names of the subcategories of the 'System' audit policy category. These include Security State Change, Security System Extension, System Integrity, Ipsec Driver and Other System Events.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
Returns the name of the operation performend by the binary operator.
- Q: names of binary operators whose (left operand type of it is type "time zone")
- A: concatenate
- A: concatenate
- A: plus
- A: minus
- A: minus
- A: equal
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Session, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns one of the following:
- The name of the provider, if there is a virtualization or cloud provider
- On Premises, if the machine is not a virtual one
- Unrecognized, if the machine is a virtual one but the provider is unknown or not supported
- Q: name of cloud provider
- A: Amazon Web Services
- Q: name of cloud provider
- A: Microsoft Azure
| Version | Platforms |
|---|---|
| 10.0.0.133 | AIX, Debian, Mac, Raspbian, Red Hat, SUSE, Solaris, Ubuntu, Windows |
Returns the mount point of the filesystem object.Example: names of filesystems - Returns the mount points of the file systems.Example: (name of it, type of it) of filesystems - Returns the names and types of all mounted file systems.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Red Hat, SUSE, Solaris |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
If Terminal Services is available and enabled under NT4/2000/2003/XP/Vista, this inspector returns the result of WTSQuerySessionInformation with WTSUserName. With Terminal Services disabled, it examines the ACLs on the security descriptor of the "winsta0" window station. Under Windows 9x, returns the "Current User" of "SYSTEM\CurrentControlSet\Control" if it exists. Otherwise returns No Such Object.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
| 8.2.1078.0 | AIX, Debian, HP-UX, Mac, Red Hat, SUSE, Solaris, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the name of the operating system as a string.
- Q: name of operating system
- A: Win8.1
- Q: name of operating system
- A: Linux Ubuntu 14.04.1 LTS
- Q: name of operating system
- A: Mac OS X
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the name of a plugin store key.
- Q: name of key "NOsecureCustomKey1" of plugin store "AWSAssetDiscoveryPlugin"
- A: NOsecureCustomKey1
- Q: name of key "Base_Version" of plugin store "VMwareAssetDiscoveryPlugin"
- A: Base_Version
| Version | Platforms |
|---|---|
| 10.0.0.133 | Red Hat, Windows |
Returns a string that uniquely identifies a service pack in the format "base-tl-sp-date". For example, AIX 5.3 at technology level 6 and service pack 3, which was released on the 32nd week of 2007, would be "5300-06-03-0732". Note: older service packs may not have a date portion, and the final service pack at a particular technology level has a SP value of 'CSP'.
| Version | Platforms |
|---|---|
| 8.2.1078.0 | AIX |
Returns the name of the setting.Example: names of settings of site "actionsite" - Returns the names of all the settings of the site named "actionsite".
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns a string containing the name of the specified smbios structure as derived from the 'Type' entry in the SMBIOS specification. To create a valid Relevance keyword, some rules are applied to the name: Spaces are replaced with underscoresParenthesized sections are deletedLeading and trailing whitespace is removedUppercase is transformed to lowercaseKeywords beginning with a number have a 'b' prepended.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Red Hat, SUSE, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.7.90 | Solaris |
Returns the column name.
- Q: names of columns 0 of rows of statement "select ArtistId, Name from Artist limit 5" of sqlite database of file "chinook.db"
- A: ArtistId
- A: ArtistId
- A: ArtistId
- A: ArtistId
- A: ArtistId
| Version | Platforms |
|---|---|
| 9.0.586.0 | AIX, Debian, HP-UX, Mac, Red Hat, SUSE, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
Returns the name of the table.
- Q: names of tables of sqlite database of file "chinook.db"
- A: Album
- A: Artist
- A: Customer
- A: Employee
- A: Genre
- A: Invoice
- A: InvoiceLine
- A: MediaType
- A: Playlist
- A: PlaylistTrack
- A: Track
| Version | Platforms |
|---|---|
| 9.0.586.0 | AIX, Debian, HP-UX, Mac, Red Hat, SUSE, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
Returns the name of the type.
- Q: names of types whose (it as string starts with "b")
- A: bes product
- A: binary operator
- A: bios
- A: bit set
- A: boolean
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Session, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the name of the specified XML DOM node as a string.Example: node names of child nodes of xml document of file "C:\WINDOWS\system32\icsxml\cmnicfg.xml" - Returns a list of the names of each node in the specified XML document.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session, Windows |
| 9.2.7.53 | Debian, Red Hat, SUSE, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the node value, which varies depending on the node type. If the standard interface produces a null type, the inspector throws NoSuchObject.Example: node value of first child of xml document of file "icsxml\cmnicfg.xml" of system folder - Returns the value of the first node in the specified file. If the first statement of the file is <xml version="1.0">, for instance, the name would be "xml" and the value would be version="1.0".
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session, Windows |
| 9.2.7.53 | Debian, Red Hat, SUSE, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns a string with the bit set padded to 64-bits.
- Q: padded string of bit set "10101"
- A: 0000000000000000000000000000000000000000000000000000000000010101
| Version | Platforms |
|---|---|
| 9.0.586.0 | AIX, Debian, HP-UX, Mac, Red Hat, SUSE, Session, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
Returns the value of parameter <string> for the active Action. Parameters only live as long as the action is active. Among the inspectable parameters is the 'action issue date' that is added to each Action by the BigFix Console at issue time.Example: parameter "action issue date" of action - This inspector returns the date the action was issued, a parameter added to each action by the BigFix Console.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Some Fixlets allow the Console Operator to customize the Action. When they are triggered, the BES Console displays a dialog prompting the user for certain Action parameters. For a given Action, this inspector returns value of the parameter specified by <string>.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Session |
Returns the specified patch id string from the package database. Typically used for existence tests.Example: exists patch id "123456-01 345678-23" of pkgdb - Returns True if these patch ids exist in the package database.Example: exists patch id whose (it contains "123456-01") of pkgdb - Returns True if the specified patch id exists in the package database.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Solaris |
Returns the specified patch id string from the specified pkginfo of the package database. Typically used for existence tests.Example: exists patch id "123456-01" of pkginfo "SUNWrdm" of pkgdb - Returns True if the designated patch ID exists in the specified pkginfo of the package database.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Solaris |
Returns the plural name of the property.
- Q: (singular name of it, plural name of it) of properties of type "boolean"
- A: conjunction, conjunctions
- A: disjunction, disjunctions
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Session, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
Returns a string describing the privileges assigned to the specified security account. For more information, see the MSDN article on LsaEnumerateAccountRights. For a description of the possible constants that can be returned, see the articles on Account Rights Constants and Privilege Constants.
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
Returns a string derived from the GetProductInfo function. Some example values are 'Business', 'Cluster Server', 'Enterprise', 'Home', etc.
- Q: (product info string of it, name of it) of operating system
- A: Business, Win8.1
| Version | Platforms |
|---|---|
| 8.0.584.0 | Windows |
| 8.2.1078.0 | Mac |
| 9.0.586.0 | AIX, Debian, HP-UX, Red Hat, SUSE, Solaris, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the algorithm identifier used to generate the public key. Signature algorithm descriptions can be found in RFC5758 and RFC5480 (which update RFC3279).
| Version | Platforms |
|---|---|
| 9.5.7.90 | AIX, Debian, Mac, Red Hat, SUSE, Session, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
This inspector returns the MAC address that the specified BigFix client registered with.Example: registration mac address of client - Returns a MAC address such as 00-1e-c9-4d-ce-5c.
| Version | Platforms |
|---|---|
| 8.0.584.0 | AIX, HP-UX, Mac, Red Hat, SUSE, Solaris, Windows |
| 8.1.535.0 | Debian, Ubuntu |
| 9.5.13.130 | Raspbian |
Returns the "ReleaseId" of the Windows operating system which indicates the update level. This is also included in the base string representation of the <operating system> inspector. A value is returned only if the "ReleaseId" is defined on the operating system.
| Version | Platforms |
|---|---|
| 9.5.0.311 | Windows |
| 9.5.3.211 | Mac |
Tries to transcode binary data in binary_string from the specified encoding to UTF-8. If the conversion succeeds, returns the converted data, if the conversion does not succeed, tries next encodings.
- Q: representations in "UTF-8;euc_jp;Shift_JIS" of (binary_string "e3838fe383ad")
- A: "ハロ"
| Version | Platforms |
|---|---|
| 9.5.7.90 | AIX, Debian, Mac, Red Hat, SUSE, Session, Solaris, Ubuntu, Windows |
| 9.5.13.130 | Raspbian |
No documentation exists.
Returns a string containing a comment associated with the specfied local group (Administrator, Guest, Users).Example: comment of local group "Administrators" - Returns the string "Administrators have complete and unrestricted access to the computer/domain".