Splunk Technology Add-on
TA-patchcompliance
Patch lag
Free for personal use · commercial license required
Security
apt/yum/dnf · apt-check · dnf updateinfo
Why TA-patchcompliance exists
"You are unpatched" with receipts: TA-patchcompliance inventories packages per host and measures lag against distro advisory data with CVSS scores, so patching work can be risk-ranked.
What it collects
- Per-host package inventory
- Missing updates versus distro advisories
- CVSS scores for outstanding CVEs
Runs on stock tools
No daemons, no agents, no exotic collectors - it shells out to well-known CLIs or reads sysfs, and parses the result into Splunk events.
External tools used: apt/yum/dnf · apt-check · dnf updateinfo.