Customizing and running Scale Jobs for large numbers of servers

A group of out-of-the-box Batch Jobs stored in the Jobs folder can help you simplify the compliance analysis process on UNIX and Linux platforms. These Batch Jobs are especially useful for analyzing compliance on a large number of servers (>50).

Each batch-type Scale Job contains the following jobs:

• A Network Shell Script Job that prepares required caches asynchronously for all targets included in the Compliance Job. For more information about these caches, see the discussion in Choosing-between-a-regular-Compliance-Job-and-a-Batch-Job.
• A Compliance Job based on a specific Compliance Content component template

The following table lists the available batch-type Scale Jobs and provides details about the NSH Script Job and Compliance Job contained in each Scale Job.

Scale Jobs for compliance analysis

To prepare a batch-type Scale Job for compliance analysis

1. In the Jobs folder, navigate to the relevant Scale Job (as listed in the table above), right-click it, and select Open.
2. On the Batch Job Options panel, under Server/Server Groups, ensure that Use the following servers for all jobs is selected, and specify the target servers where you want to analyze compliance.
   
   Target servers must match the operating system of the component template (also indicated within job names).
3. Continue with scheduling the Batch Job as described in Creating-and-modifying-Batch-Jobs.
    The job is stored in the Jobs folder, in the subfolder that you specified for the job.

4. If you want to change any of the following parameters of the NSH Script Job, you can change them in the appropriate script file in Depot/scale scripts Group through the NSH Script Editor. Your changes affect all jobs that call this script.

   The [confluence_table-plus] macro is a standalone macro and it cannot be used inline. Click on this message for details.
   This macro generates standalone content. As a consequence you need to make sure to use a syntax that separates your macro from the content before and after it so that it's on a line by itself. For example in XWiki Syntax 2.0+ this means having 2 newline characters (a.k.a line breaks) separating your macro from the content before and after it.Parameters of the NSH Script Job within the Batch Jobs for PCIv2 and CIS

   Parameter	Description
   CACHE_HRS_VALUE	The frequency (in hours) of cache refresh. By default, the value for this parameter is derived from a property in the target's Server property class (that is, TARGET.CACHE_HRS).
   FIND_FILES_TIMEOUT_VALUE	The timeout (in minutes) of find files. The default is 0 (no timeout).
   EXCLUDED_DIR_VALUE	Directory paths to be excluded from searches. Separate multiple directories with commas.
   FORCEFIND_VALUE	To force an immediate cache refresh whenever the Compliance Job runs (overriding the CACHE_HRS_VALUE parameter), change from the default value of n (no) to y (yes).
   MAX_DISK_PERCENTAGE_VALUE	Maximum disk percentage allowed during cache preparation before the process is stopped and an error is issued. By default, the value for this parameter is derived from a property in the target's Server property class (that is TARGET.MAX_DISK_PERCENTAGE).
   RSCD_DIRECTORY_VALUE	The RSCD directory to be excluded from the global search for non-compliant files.
   SCAN_DIRECTORY_VALUE	The directory to use as the starting directory for the global search for non-compliant files.