suppression for OS patching

[sel300900]

wondering how you deal with  suppression for OS patching  on a wide number of servers :

Looking for how I can do an estate wide suppression for OS patching to either suppress 100s of servers in  2 hour window or just general advice on how thew community are doing this for OS patching 

[AntonPineiro · Accepted solution]

Hi,

You can create a Maintenance window for hosts involved.

You can reference them by management zones or tags but it depends how you organize your environment.

Best regards

[ChadTurner · Accepted solution]

you could also add this into a pipeline where the hosts selected are posted into a Maintenance Window. Also are the hosts in particular defined prior to patching. You could tag them with a patch group number and then associate a MW to all of those entities of the Patch group number value. 

[Kor01]

We leverage tags for this. We have automation that applies tags with the hosts with the name of the maintenance window. Then we have recurring windows defined that applies to those hosts

[ChadTurner]

I would not recommend reusing Maintenance Windows or leverage methods that fixate on tags. Reason being is that as the tag is removed, or as a Maintenance Window is reused, any historical context of the applied Maintenance Window on the entity is erased.