topic Re: suppression for OS patching in Alerting

suppression for OS patching

sel300900 — Wed, 07 Feb 2024 10:57:07 GMT

wondering how you deal with suppression for OS patching on a wide number of servers :

Looking for how I can do an estate wide suppression for OS patching to either suppress 100s of servers in 2 hour window or just general advice on how thew community are doing this for OS patching

Re: suppression for OS patching

AntonPineiro — Tue, 06 Feb 2024 12:54:01 GMT

Hi,

You can create a Maintenance window for hosts involved.

You can reference them by management zones or tags but it depends how you organize your environment.

Best regards

Re: suppression for OS patching

ChadTurner — Tue, 06 Feb 2024 14:28:52 GMT

you could also add this into a pipeline where the hosts selected are posted into a Maintenance Window. Also are the hosts in particular defined prior to patching. You could tag them with a patch group number and then associate a MW to all of those entities of the Patch group number value.

Re: suppression for OS patching

Kor01 — Tue, 06 Feb 2024 15:52:35 GMT

We leverage tags for this. We have automation that applies tags with the hosts with the name of the maintenance window. Then we have recurring windows defined that applies to those hosts

Re: suppression for OS patching

ChadTurner — Tue, 06 Feb 2024 20:38:35 GMT

I would not recommend reusing Maintenance Windows or leverage methods that fixate on tags. Reason being is that as the tag is removed, or as a Maintenance Window is reused, any historical context of the applied Maintenance Window on the entity is erased.