wondering how you deal with suppression for OS patching on a wide number of servers :
Looking for how I can do an estate wide suppression for OS patching to either suppress 100s of servers in 2 hour window or just general advice on how thew community are doing this for OS patching
you could also add this into a pipeline where the hosts selected are posted into a Maintenance Window. Also are the hosts in particular defined prior to patching. You could tag them with a patch group number and then associate a MW to all of those entities of the Patch group number value.
I would not recommend reusing Maintenance Windows or leverage methods that fixate on tags. Reason being is that as the tag is removed, or as a Maintenance Window is reused, any historical context of the applied Maintenance Window on the entity is erased.