diagnose
Run symptom playbooks on Tenable Patch Management logs to identify root causes, return verdicts with evidence, and provide remediation for issues like patch failures or connectivity problems.
Instructions
Run a symptom playbook: read the right logs and return a verdict with evidence.
Symptoms:
patch_install_failed - deployment results, installer exit codes (decoded), MSI failures
content_download - content / peer-to-peer / CDN download problems on clients
client_connectivity - client transport errors, server retries per client ID, registrations rejected for missing install authentication
vm_integration - Tenable VM / Security Center access settings, API key failures, vulnerability import runs
feeds - periodic feed checks, last success, failure root causes
content_publication - content uploads to the CDN that failed
service_health - service starts with versions, restart loops, crashes, out-of-memory
database - SQL errors, SQL Server authentication, deadlocks
client_upgrade - upgrade problems and versions seen over time
feature_update_readiness - free disk space vs the 50 GB requirement, NOT INSTALLED scans
Args: symptom: One of the symptom ids above. since: Window start (ISO or relative like 24h). Default 7d. until: Window end. source: Source name; omit for all sources. device: Only this device.
Returns:
verdict, findings (known issues with remediation), other related errors,
playbook-specific details, missing_logs with how to get them, and advice.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| since | No | 7d | |
| until | No | ||
| device | No | ||
| source | No | ||
| symptom | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||