Exporting SCAP results

You can export the SCAP Compliance Job results to XCCDF-compliant XML file and view the XML file in human-readable form in a web browser. You can also export to the following reporting formats:

  • Asset Reporting Format (ARF) version 0.41 (a component of SCAP 1.0) or version 1.1 (a component of SCAP 1.2)
  • Assessment Summary Results (ASR) version 0.41 (a component of SCAP 1.0)
  • Asset identification (AI) version 1.1 (a component of SCAP 1.2)

The exported files can be stored in the location of your choice.

To export an XCCDF results file

  1. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
    One or more job run instances appear in the Content View.
  2. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
  3. Right-click one of the views or one of the target servers under Server View and select Export SCAP Compliance Results and then one of the following options for which rules to include in the export:
    • All rules
    • Failed rules
    • Passed rules
  4. In the Export SCAP Results dialog box:
    1. Select the server on which you want to store the exported file.
    2. Select a drive on that server.
    3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.
    4. For a job that was run against multiple target servers (and only if you accessed this dialog box from the Server View node), use the Split files  check box to specify the number of output files:
      • To export results for each server to a separate file, select the Split files check box.
      • To export results for all servers into the same file, clear the check box.
    5. Enter a file name.
      If the Split files check box is selected, the name that you enter here is appended with the name of each specific server (that is, yourFileName_serverName) in the output files.
  5. To start the export, click Save. and the name that you enter here is appended with the name of each specific server.

To view XCCDF results in human-readable form

  1. Export the XCCDF results as described in the previous procedure.
  2. Open the exported XML file in a web browser. You specified the file name in the export process.

    Note

    If you move the exported XML file, make sure to move the XSLT file along with it. The XSLT file name is xccdf.xsl.

  3. Allow ActiveX requests.
  4. Scroll to the right side of the browser window and click the down arrows to expand sections of the report. Similarly, click an up arrow to contract a section.

To export an ARF results file

  1. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
    One or more job run instances appear in the Content View.
  2. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
  3. Right-click Server View (or the individual target servers in this view) and select Export Other SCAP Formats > ARF report.
  4. In the Export ARF Results dialog box, configure the following settings:
    1. From the scroll bar, select Servers (if you want to store the exported file on a remote server) or Local Computer (to store the exported file on a local drive).
    2. Select a drive on that server.
    3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.
    4. Enter a name for the exported file or files.

      Note

      For a job that was run against multiple target servers (and only if you accessed this dialog box from the Server View node): By default, a separate file is exported for each server, and the name that you enter here is appended with the name of each specific server (that is yourFileName_serverName). If you prefer to export the results from all servers in a single file, click Options and then clear the Split Files check box. This option is relevant only for ARF 0.41, and not for ARF 1.1.

    5. Select the report type — either ARF 0.41 (a component of SCAP 1.0) or ARF 1.1 (a component of SCAP 1.2).
  5. To start the export, click Save.

To export an ASR results file

  1. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
    One or more job run instances appear in the Content View.
  2. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
  3. Right-click Server View (or the individual targets in this view) and select Export Other SCAP Formats > ASR report.
  4. In the Export ASR Results dialog box:
    1. From the scroll bar, select Servers (if you want to store the exported file on a remote server) or Local Computer (to store the exported file on a local drive).
    2. Select a drive on that server.
    3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.
    4. Enter a name for the exported file or files.

    5. Ensure that the report type appears as ASR 0.41 (a component of SCAP 1.0).
  5. To start the export, click Save.

To export an AI results file

  1. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
    One or more job run instances appear in the Content View.
  2. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
  3. Right-click Server View (or the individual targets in this view) and select Export Other SCAP Formats > AI report.
  4. In the Export AI Results dialog box:
    1. From the scroll bar, select Servers (if you want to store the exported file on a remote server) or Local Computer (to store the exported file on a local drive).
    2. Select a drive on that server.
    3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.
    4. Enter a name for the exported file or files.

    5. Ensure that the report type appears as AI 1.1 (a component of SCAP 1.2).
  5. To start the export, click Save.

Note

  • Exported results files support IPv6 server addresses. In the ARF/ASR/AI results file, IPv6 addresses are marked with the IPv6 tag, while IPv4 addresses are marked with the IPv4 tag.
  • Whenever there is a change in the IP address of the target/server enrolled in BMC Server Automation, you need to run an Update Server Properties Job and rerun the Compliance job, so that the new IP address is reflected in reports. If you do not run the Update Server Properties Job and export the results, you will receive the message "The network configuration data is missing for ... targets."

Related topic

Creating and modifying SCAP Compliance Jobs

Was this page helpful? Yes No Submitting... Thank you

Comments