Testing a compliance rule

To test a compliance rule

1. On the Compliance panel, select the rule you want to test and click Edit.
   The Compliance Rule Editor opens.
2. On the Rule Definition tab in the Compliance Rule Editor, click Test the Rule .
   The Test Compliance Rule window opens.
3. In the Component Selection area on the left, click Add Components .
   The Add Components window opens.
4. Select the components that you want to test against, and click the right arrow to move your selections to the right panel.

   Note

   Testing is possible on up to 100 components. For a larger number of components, create and run a Compliance Job.

5. In the same window, select the server whose components you want to test, and click the right arrow to move your selections to the right panel.
   To remove a component or server, select it and click Remove Item .
6. Click Run Test to test the rule on all selected components.

   Note

   To stop the test run before it completes running, click Stop Test .

   Unknown macro: {multi-excerpt}

   1. Unknown macro: {multi-excerpt}
      Expand server and component branches to view test results.
      A green success or red failure icon appears beside each component.
   2. For more details about the success or failure of a component to satisfy the compliance rule, select the component.
      Two panes display on the right. The top pane displays the full rule as defined through the Rule Editor, including all its conditions (basic conditions, if-then conditional constructs, or loops). Any condition within the rule that caused the rule to end in Non-compliant status appears in red. The overall compliance status for the full compliance rule appears at the top, as well as an indication of whether any exceptions were defined. The bottom pane displays compliance details on the target component for a selected condition.
   3. In the top pane, select a basic condition within the rule.
      In the bottom pane, the condition is parsed into columns for the left-hand-side (LHS) operand, comparison operator, and right-hand-side (RHS) operand. An additional Success column indicates whether the component satisfied the condition (either true or false). The actual value detected on the target component appears in brackets after the LHS operand so that you can see how it compares to the value in the RHS operand.

      Note

      In the top pane, condition operands or loop operands that are very long are truncated and end with an ellipsis (...).

      Cardinality conditions are not parsed in the bottom pane. A basic condition is not parsed if it contains wild cards and was satisfied by the component.

      If a basic condition is preceded by a NOT logical operator, the Success column in the bottom pane shows a value of true when the condition appears in red in the top pane.

      Lines that were not analyzed appear in gray in the rule in the top pane. For example: if, then, or else blocks in a conditional construct that were skipped or not reached.

      In a conditional construct only one then line, or the last else line, may appear in red. All if and elseif lines always appear in black font.

      In a Foreach loop, details are displayed in the bottom pane only for the non-compliant configuration objects. In a Count loop, details are displayed for all relevant configuration objects (whether compliant or not), but only if the entire loop was non-compliant.

7. If a condition includes ACL information, you can view detailed ACL information for a target component by doing the following:
   1. Select an entry in the Target pane that includes ACL information and click View ACL Details . A details window opens. It provides a list of applicable permissions.
   2. Select a name in the Access Control List, and then click View ACL Details.
      Another detail window shows permissions granted to the name you selected.
   3. Click Close and then click Close again to close both detail windows.

8. Unknown macro: {multi-excerpt} Click Close to close the Test Compliance Rule window.
   Unknown macro: {multi-excerpt}