Unsupported content

 

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Setting up data collection for Compliance reports

Compliance reports show how accurately servers are configured in relation to the compliance rules specified in component templates. These reports contain information about server compliance, policy compliance, number of compliant and non-compliant servers, and compliance trends. This information is derived from the Compliance Job runs in BMC Server Automation servers.

BMC Decision Support for Server Automation offers an additional type of reports that are based on compliance analysis of the Security Content Automation Protocol (SCAP) benchmark content. The information in the SCAP Compliance reports is derived from the SCAP Compliance Job runs in BMC Server Automation servers. 

This topic provides an overview of how to set up Compliance and SCAP Compliance Jobs in BMC Server Automation and a few considerations for the Compliance reports.


Setting up Compliance Jobs in BMC Server Automation

Perform the following tasks to set up the BMC Server Automation jobs needed to support the Compliance reports:

  1. Identify the compliance rules against which you want to validate the servers in your data center and create the compliance policy using these rules. For instructions, see Adding or editing a compliance rule in the BMC Server Automation documentation.
    You can also use compliance templates supplied by BMC to validate standard regulatory compliance of your servers. For instructions, see Creating a component template in the BMC Server Automation documentation.
  2. Set up the Compliance Jobs to monitor the compliance of servers or snapshots against policies defined in the previous step. For more information, see Creating Compliance Jobs in the BMC Server Automation documentation.

Setting up SCAP Compliance Jobs in BMC Server Automation

Perform the following tasks to set up the BMC Server Automation SCAP Compliance jobs needed to support the SCAP Compliance reports:

  1. On the BMC Server Automation application server, import the SCAP benchmark that is appropriate for the operating system of the target servers that you plan to select in the SCAP Compliance Job. To import a benchmark, see Importing SCAP content in the BMC Server Automation documentation.
  2. Set up the SCAP Compliance jobs to monitor the compliance of servers against the SCAP content. For more information, see Creating an SCAP Compliance Job in the BMC Server Automation documentation.

Considerations for Compliance reports

The following conditions apply to the Compliance and SCAP Compliance ad hoc reports:

  • If any of the following query items have a value of NULL or blank in the BMC Server Automation database and you combine them with any query items from the Compliance Exception query subject, the ad hoc report shows data for a job and rule in multiple rows instead of one row:

    • Compliance/Compliance Rule
    • Compliance/Compliance Rule Result
  • If only the SCAP Compliance Jobs (and not the Compliance Jobs) have been run in BMC Server Automation, the query items from the query subjects (except Compliance Server) do not display data in the ad hoc report. The report displays data only if you use a query item from the SCAP folder.

Related topic

Built-in Compliance reports

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Comments