How to Automate Linux Patch Deployment?

Apply Now

Select Apply Now to run the automation immediately.

On a Schedule

Select On a Schedule to configure the automation to run at a specified time or frequency.

Under Schedule Settings, configure the following:

• Frequency: Specifies how often the automation runs.
  • Run Once: Runs the automation once at a specified date and time.
  • Every Day: Runs the automation every day at a specified time.
  • Weekly: Runs the automation on selected days of the week at a specified time.
  • Monthly: Runs the automation on a specified day of each month at a specified time.
• Time Settings – Configure the day, date, time, and time zone based on the selected frequency.
  • Scheduled Date (for the run once option): Select the date on which the automation should run in the MM/DD/YYYY format.
  • Scheduled Time: Specify the exact time for automation execution in the HH:MM format and select the time zone.

Event

Select Event to trigger the automation based on a specified device event or condition.

After configuring the required trigger, click Next.

Configure Update Criteria

Under Update Criteria, define the conditions that an update must meet to qualify for automated deployment to your Linux devices.

Each condition consists of:

• Data Column: Specifies the update attribute to evaluate.
• Comparator: Specifies how the attribute should be evaluated.
• Value: Specifies the value that the update must match.

The available data column options are:

• Product: The product associated with the update.
• Release Date: The date on which the update was released.
• Severity: The severity assigned to the update.
• Update Classification: The classification assigned to the update.
• Update Name: The name of the update.

For example, to deploy updates with a Critical severity, select Severity as the Data Column, select Is as the comparator, and enter Critical as the Value.

Add Multiple Update Conditions

You can combine multiple conditions to create more specific deployment criteria.

1. Click the + icon to add a nested filter.
2. Click New filter to add another filter.
3. Configure the required Data Column, Comparator, and Value.
4. Select the appropriate logical operator when configuring multiple filters.

The available operators are:

• AND: All specified conditions must be met.
• OR: At least one of the specified conditions must be met.

Nested filters use the AND operator, so all conditions within a nested filter must be satisfied.

After configuring the required criteria, click Confirm.

Require Update Approval

Enable Require update approval to deploy only Linux updates that have been approved by an administrator to the target devices.

To approve an update:

1. Go to Patches and Updates > Patches.
2. Select the required update
3. Click Actions > Approve. Alternatively, open the update to view its summary page and click Approve.
4. Click Proceed to confirm the approval.

Notes: Approve an update after testing it on applicable Linux devices and verifying that it is compatible with the target environment and does not introduce unexpected issues.

Install and Reboot During the Maintenance Window

Enable Install and reboot only during maintenance window to restrict update installation and device reboot to the device’s maintenance window.

Notes:

• Configure the maintenance window in Update Preferences under the Patches and Updates policy for Linux and apply the policy to the target Linux devices. When this option is enabled, updates are installed and devices are rebooted only during the configured maintenance window.
• When Run Once is configured under On a Schedule, the specified date and time trigger the automation. If Install and reboot only during maintenance window is enabled, the eligible updates are installed during the next configured maintenance window after the automation is triggered.
• If no maintenance window is configured, the device’s default maintenance window is used.

Configure Technician Notifications

Use Configure Technician Notifications to send email notifications to selected technicians about update installation status.

Configure the following options:

• Notify installation failures every: Specify how frequently to send email notifications about failed update installations. The supported interval is 1–23 hours. For example, if the interval is set to 2 hours, the portal sends failure notifications at 2-hour intervals.
• Notify installation status every: Specify how frequently to send email notifications about update installation status. The supported interval is 1–23 hours.
• Choose technicians to notify: Select the technicians who should receive the configured update installation notifications.

Configure Retries

Enable Configure retries to automatically retry the automation action when its execution fails.

Configure the following settings:

• Number of retries: Specify the maximum number of retry attempts. The supported range is 1-3.
• Retry delay in minutes: Specify the delay between retry attempts. The supported range is 10-180 minutes.

After configuring the required deployment rules, click Next.

Include Groups

Use Included Groups to specify the groups to which the automation applies.

1. Click Add Groups.
2. Select the required device or user groups.
3. Verify the selected groups.

Note: At least one included group is required for the automation.

Exclude Groups

Use Excluded Groups to prevent specific groups from receiving the automation.

1. Click Add Groups.
2. Select the device or user groups that should be excluded.
3. Verify the selected groups.

The automation is not applied to the groups selected under Excluded Groups.

Configure Target Filters

Use Filters to target devices based on supported device attributes.

1. Click Add filter.
2. Select the required category and subcategory.
3. Select a comparator.
4. Specify the value for the comparison.
5. Add additional filters if required.

You can combine multiple filters using AND or OR operators:

• AND: The target must satisfy all specified conditions.
• OR: The target must satisfy at least one of the specified conditions.

After configuring the target devices and filters, click Next.