Use this page to post relevance tips and tricks.

 

Querying HKEY_CURRENT_USER branch of registry

Since the BigFix Agent runs as the SYSTEM account, when you write relevance that accesses the "HKEY_CURRENT_USER" branch of the registry, the agent will query the SYSTEM account's HKCU rather than the logged in user's HKCU (note that this is different from what you see in the Relevance Debugger, which will return results from the HKCU of your logged on user). To help query the local logged on users' HKCU branch of the registry, there is an inspector "current user keys" that can be used:

q: exists key "Software\BigFix" of current user keys (logged on users) of registry

A: True

 

Introspectors!

These relevance inspectors let you query the relevance language. It is a self documenting feature and is a very powerful way to discover new inspectors in the newest versions of TEM while you wait for the official documentation to be released.



Properties that return folder objects (creation methods). This asks "How do I create Folder Objects?"

q: properties returning (type "folder")

Query all properties of an object type. This asks "What can I query about a Folder Object?"

q: properties of type "folder"

Introspecting the Introspectors.

q: (it, result types of it, direct object types of it) of properties whose (result type of it as string = "property" or direct object type of it as string = "property")

Not sure what property types there are? Try pulling all types:

q: unique values of (result types of properties as string)

Error Trapping shortcut in 8.x

in 7.x and earlier, in order to have good property and analysis results, we would catch existence errors lke this:

q: <property> of <foo> as string

E: Singular expression refers to nonexistent object.

q: if (exists <foo>) then (<property> of <foo> as string) else ("Missing foo")

a: Missing foo

New in 8.x you can use the new "or" formulation using the pipe character to catch your error gracefully

q: <property> of <foo> as string | "Missing foo"