Run Client Task\Tag on Systems that had failed deployment attempts

[Omriil]

I know that there are queries that show failed deployment attempts, is there a way to create a Tag Criteria that will automatically tag systems that had more than 2-3 failed product deployment attempts so I could automatically run Client Tasks on them?

I don't mind even creating a query that finds systems with 2-3 failed attempts and then run a Server Task that tags them, I just don't know how to filter this correctly.

[cdinet · Accepted solution]

You can create a new query or duplicate the original one for failed deployments and filter it for most recent time frames, such as within last day.  It would be a threat event query for event id 2412.  The query would need to be table type.  Then set up a server task to run that query and secondary action to tag the systems with a tag you have created for this that you can run daily.  Once your systems have the products installed, you can set up query to run to detect that, then action in server task to remove tag.

The only thing about that is that there is no way to add a condition where event occurred more than once.