Setting up data collection for Compliance reports

This topic provides an overview of how to set up Compliance Jobs in TrueSight Server Automation.

Compliance reports show how accurately servers are configured in relation to the compliance rules specified in component templates. These reports contain information about server compliance, policy compliance, number of compliant and non-compliant servers, and compliance trends. This information is derived from the Compliance Job runs in TrueSight Server Automation servers.

TrueSight Smart Reporting for Server Automation offers an additional type of reports that are based on compliance analysis of the Security Content Automation Protocol (SCAP) benchmark content. The information in the SCAP Compliance reports is derived from the SCAP Compliance Job runs in TrueSight Server Automation servers.  For information about SCAP, see SCAP compliance analysis in the TrueSight Server Automation documentation. 

Setting up Compliance Jobs in TrueSight Server Automation

Perform the following tasks to set up the Compliance jobs in TrueSight Server Automation, needed to support the Compliance reports:

1. Identify the compliance rules against which you want to validate the servers in your data center and create the compliance policy using these rules. For instructions, see  Adding or editing a compliance rule  in the TrueSight Server Automation documentation.
   You can also use compliance templates supplied by BMC to validate standard regulatory compliance of your servers. For instructions, see Creating a component template in the TrueSight Server Automation documentation.

2. Set up the Compliance Jobs to monitor the compliance of servers or snapshots against policies defined in the previous step. For more information, see  Creating Compliance Jobs  in the TrueSight Server Automation documentation.

   Null value in the query item

   If any of the following query items have a value of NULL or blank in the TrueSight Server Automation database and you combine them with any query items from the Compliance Exception query subject, the ad hoc report shows data for a job and rule in multiple rows instead of one row:

   • 
     
     • Compliance/Compliance Rule
     • Compliance/Compliance Rule Result

Setting up SCAP Compliance Jobs in TrueSight Server Automation

Perform the following tasks to set up the SCAP Compliance jobs in TrueSight Server Automation, needed to support the SCAP Compliance reports:

1. On the TrueSight Server Automation application server, import the SCAP benchmark that is appropriate for the operating system of the target servers that you plan to select in the SCAP Compliance Job. To import a benchmark, see  Importing SCAP content  in the TrueSight Server Automation documentation.

2. Set up the SCAP Compliance jobs to monitor the compliance of servers against the SCAP content. For more information, see  Creating and modifying SCAP Compliance Jobs in the TrueSight Server Automation documentation.
   
   

   Running only the SCAP Compliance Jobs

   If only the SCAP Compliance Jobs (and not the Compliance Jobs) have been run in TrueSight Server Automation, the query items from the query subjects (except Compliance Server) do not display data in the ad hoc report. The report displays data only if you use a query item from the SCAP folder.

Running ETL

Once you have set up Compliance or SCAP Compliance Jobs, run ETL to transfer the data to the reports data warehouse.

Related topic

Compliance reports