Compliance tab for a component template
The Compliance tab lets you define compliance rules for analysis on a collection of component template parts (also referred to as compliance parts).
The compliance rules can include remediation options, which specify what action should be taken when a component does not comply with a compliance rule.
When a Compliance Job runs, it considers all of the compliance parts on a target server and compares them to the compliance rules. If the compliance parts do not satisfy the compliance rule and remediation is enabled, BMC Server Automation can deploy a BLPackage to the component to correct the failure. It can also ignore the failure.
As you set up each compliance rule, you may also want to set up a BLPackage that can be used to remediate failure for that rule. An easy way to accomplish this is to launch two instances of the BMC Server Automation Console . As you set up a compliance rule in one console, you can define the corresponding BLPackage in another console.
To help you review the details of rules and parts, you can use scripts to export lists of these items in .csv files. For more information, see Export Template Rules and Parts in the Server Automation community at the BMC Communities site.
When defining compliance rules, you can organize rules into rule groups. Rules and rule groups are processed in the order in which you specify. In some situations this order can be important. For example, if you are remediating by deploying patches, you must often apply the patches in a certain order.
If a component template has a broken dependency on a deleted BLPackage, the Compliance tab may include broken compliance rules. These are marked with a red X superimposed on a corner of the compliance rule icon. If a component template includes broken compliance rules, you can correct them by editing the rule, specifying an existing BLPackage as the correct compliance package, or removing the broken rule. You cannot edit and save a component template that includes a broken compliance rule.
The following topics describe the procedures you can perform using the Compliance tab:
- Understanding the compliance parts list
- Adding a compliance rule group
- Adding or editing a compliance rule
- Defining general rule settings in the Rule Editor
- Defining a rule in the Rule Editor
- Defining a basic condition
- Defining a conditional construct
- Defining a loop
- Operand data types and operator compatibility
- Using wildcards in compliance rules
- Using commands in conditions
- Testing a compliance rule
- Defining remediation options in the Rule Editor
- Commenting out and uncommenting a compliance rule
- Copying, cutting, and pasting a compliance rule
- Examples for creating compliance rules