04-05-2010 02:57 PM
We are trying to find a way to have SWA automatically download definate and relevant patches into a bundle for install. We are using the SWA command with the following switches "CRIT PCW PW QPK SEC"
Thanks in advance.
Solved! Go to Solution.
04-05-2010 06:26 PM
You can use the following commands,
Remeber , you should have connection to ITRC.hp.com
#swa report -x analyzers='CRIT PCW PW QPK SEC'
#swa report -a CRIT -a PCW -a PW -a QPK -a SEX
Then it will create a report in the current folder, if your server doesnt have access to ITRC it will throw an error while trying to download the database file.
Once you prepared the inventory , you can see the file in PWD. it will give you an HTML report, you can check whihc and all are the patches installed and which and all are suggested.
Then you can use
swa get -t mydepot -x allow_existing_depot=true
which will download the patches and create a depote and publish it.
once done, you can isntall the bundle using DRD or normal swinstall!!!
04-05-2010 06:52 PM
This thread, http://forums13.itrc.hp.com/service/forums/questio
I have to say again, swa is a very decent tool. I am quite impressed.
Senior UNIX Admin
O'Leary Computers Inc
06-02-2010 03:00 PM
Sooraj, I have to admit I have been searching the code for the "SEX" analyzer, but it keeps coming up "SEC" I am afraid ;-)
Dave, the good news is that I cannot think of a case in which a patch would be associated with an Unknown DC. There will be bulletins that require more than one action, but I would expect a mixture of D and R for them.
06-02-2010 05:19 PM
I teach HP-UX around the clock (around many other jobs I have at HP).
Based on Doug's original script, I did a bit more work and the results are here:
And I gave credit to Doug as he deserves it :)
Indeed, when I show SWA to students and
customers, they are, without any hesitation,
impressed. Especially since it is easy,
free, and secure (most of other vendors
require contact for access to patches).
I even added option to download patches
from previous catalog versions (see the script). One of the critical customers
asked for such an option and I designed it
by running the script as cron job with
One of the suggestions that my customers
always ask for is better dealing with UNBUNDLED products (like ONC).
Anyway, good luck and enjoy using it.