Compliance Bar in Patching is based the number of critical patches installed divided by the total critical patches downloaded to the Kbox Server. This takes into account all Critical patches other than status=1 (INACTIVE), and uses the detect results for each patch only with PATCHED or NOTPATCHED status. This means that patches that do not apply to a given machine (status NA) are not counted for that machine.
The % displayed is calculated by the following formula:
# of PATCHED / ( (# of PATCHED) + (# of NOTPATCHED) )
Troubleshooting tips:
The compliance bar graph is based on the following query:
select MS.STATUS, count(*) AS COUNT
from PATCHLINK_MACHINE_STATUS MS,
PATCHLINK_PATCH_STATUS PS,
KBSYS.PATCHLINK_PATCH P
where MS.STATUS in ('PATCHED','NOTPATCHED')
and MS.DETECT_ERROR_CODE = 0
and MS.PATCHUID = P.UID
and MS.PATCHUID = PS.PATCHUID
and PS.STATUS != 1
and P.IMPACTID like 'Critical%'
group by MS.STATUS
Here is a query that would show the detail of the machines and patches that were being counted as not patched in the compliance bar graph:
select M.NAME, P.TITLE
from PATCHLINK_MACHINE_STATUS MS,
PATCHLINK_PATCH_STATUS PS,
KBSYS.PATCHLINK_PATCH P,
MACHINE M
where MS.STATUS = 'NOTPATCHED'
and MS.DETECT_ERROR_CODE = 0
and MS.PATCHUID = P.UID
and MS.PATCHUID = PS.PATCHUID
and PS.STATUS != 1
and P.IMPACTID like 'Critical%'
and M.ID = MS.MACHINE_ID
order by M.NAME, P.TITLE
For those two above SQL, create a SQL report to get more informaiton to determine more information on your compliance bar and compliance percentage goals.