report for certain security patch

[vespavbb]

Hi,

is there a way to generate a report to find if a certain esx patch is installed or not.

For Example "ESXi670-202011301-SG"

Thanks

[LucD]

Which vSphere version?
In v7 you will have to use vLCM, in pre-v7 you can use the Update Manager cmdlets (Get-Compliance) 

[vespavbb]

Hi Luc,

in v6.7

how could I extend this script for a certain patch only?

$report = foreach($esx in get-cluster "*" | Get-VMHost){
    foreach($baseline in (Get-Compliance -Entity $esx -Detailed | where {$_.Status -eq "NotCompliant"})){
        $baseline.NotCompliantPatches |
        select @{N="Host";E={$esx.Name}},
        @{N="Baseline";E={$baseline.Baseline.Name}},Name,ReleaseDate,IdByVendor,
        @{N="KB";E={(Select-String "(?<url>http://[\w|\.|/]*\w{1})" -InputObject $_.Description).Matches[0].Groups['url'].Value}}
    }
}

$report

[LucD]

The only way I know of is to insert a Where-Object clause after $baseline.NotCompliantPatches.