Page tree

You can view how a particular component satisfies a compliance rule for a component template.

To view the results of a compliance rule

  1. In the Jobs folder, right-click a Compliance Job, and select Show Results.
    A new tab opens in the content editor. It shows the Compliance Job results.
  2. In the hierarchical tree on the left of the tab, expand a particular run of the Compliance Job, and do one of the following:
    • Select the Server View node, expand a server, expand a component, expand a rule group, and then select a rule.
    • Select the Rules View node, expand a component template, expand a rule group, expand a rule, and then select a component.
      Two panes display on the right. The top pane displays the full rule as defined through the Rule Editor, including all its conditions (basic conditions, if-then conditional constructs, or loops). Any condition within the rule that caused the rule to end in Non-compliant status appears in red. The overall compliance status for the full compliance rule appears at the top, as well as an indication of whether any exceptions were defined. The bottom pane displays compliance details on the target component for a selected condition.
  3. In the top pane, select a basic condition within the rule.
    In the bottom pane, the condition is parsed into columns for the left-hand-side (LHS) operand, comparison operator, and right-hand-side (RHS) operand. An additional Success column indicates whether the component satisfied the condition (either true or false). The actual value detected on the target component appears in brackets after the LHS operand so that you can see how it compares to the value in the RHS operand.

    Note


    In the top pane, condition operands or loop operands that are very long are truncated and end with an ellipsis (...). To view the full text within such conditions or loops, click the Condition Zoom In View button and select the relevant lines. The selected lines are presented in the read-only Rule Editor Condition Zoom view.
    Cardinality conditions are not parsed in the bottom pane. A basic condition is not parsed if it contains wildcards and was satisfied by the component.
    If a basic condition is preceded by a NOT logical operator, the Success column in the bottom pane shows a value of true when the condition appears in red in the top pane.
    Lines that were not analyzed appear in gray in the rule in the top pane. For example: if, then, or else blocks in a conditional construct that were skipped or not reached.
    In a conditional construct only one then line, or the last else line, may appear in red. All if and elseif lines always appear in black font.
    In a Foreach loop, details are displayed in the bottom pane only for the non-compliant configuration objects. In a Count loop, details are displayed for all relevant configuration objects (whether compliant or not), but only if the entire loop was non-compliant.

  4. If an exception has been defined for a rule, you can view that exception by doing the following:
    1. Click View Exceptions. The View Associated Exceptions dialog box opens.
    2. To view more information about an exception, select the exception in the Compliance Exceptions list and click View Selected Exception .
      The View Compliance Exception dialog box opens.
    3. To view the rules for which exceptions are granted, click the Associated Compliance Rules tab. If you have specified particular paths that should not be evaluated, the Ignored paths column lists them.
    4. Click Close to close the View Compliance Exception dialog box.
    5. Click Close to close the View Associated Exceptions dialog box.
      For information about defining compliance rule exceptions, see Defining exceptions for components.
  5. If a condition includes ACL information, you can view detailed ACL information for a target component by doing the following:
    1. Select an entry in the Target pane that includes ACL information and click View ACL Details .
      A details window opens. It provides a list of applicable permissions.
    2. Select a name in the Access Control List, and then click View ACL Details .
      Another detail window shows permissions granted to the name you selected.
    3. Click Close and then click Close again to close both detail windows.