Exporting SCAP results

You can export the SCAP Compliance Job results to XCCDF-compliant XML file and view the XML file in human-readable form in a web browser. You can also export to the following reporting formats:

• Asset Reporting Format (ARF) version 0.41 (a component of SCAP 1.0) or version 1.1 (a component of SCAP 1.3 and 1.2)
• Assessment Summary Results (ASR) version 0.41 (a component of SCAP 1.0)
• Asset identification (AI) version 1.1 (a component of SCAP 1.3 and 1.2)

The exported files can be stored in the location of your choice.

• To export an XCCDF results file
• To view XCCDF results in human-readable form
• To export an ARF results file
• To export an ASR results file
• To export an AI results file
• Related topic

To export an XCCDF results file

1. Log in to the TrueSight Server Automation console.
2. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
    One or more job run instances appear in the Content View.
3. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
4. Right-click one of the views or one of the target servers under Server View and select Export SCAP Compliance Results and then one of the following options for which rules to include in the export:
   • All rules
   • Failed rules
   • Passed rules
5. In the Export SCAP Results dialog box:
   1. Select the server on which you want to store the exported file.
   2. Select a drive on that server.
   3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.
   4. For a job that was run against multiple target servers (and only if you accessed this dialog box from the Server View node), use the Split files check box to specify the number of output files:
      • To export results for each server to a separate file, select the Split files check box.
      • To export results for all servers into the same file, clear the check box.
   5. Enter a file name.
      If the Split files check box is selected, the name that you enter here is appended with the name of each specific server (that is, yourFileName_serverName) in the output files.
6. To start the export, click Save. and the name that you enter here is appended with the name of each specific server.

To view XCCDF results in human-readable form

1. Export the XCCDF results as described in the previous procedure.

2. Open the exported XML file in a web browser. (Locate the file by searching for the name that you specified during the export process.)

   • To view the results file in Firefox

     Do the following (For all browser sessions):

     1. Enter the following text in the address bar of the browser: about:config
     2. On the search bar, search for privacy.file_unique_origin, and set its value to false.
     3. Restart the browser and open the file.
   • To view the results file in Chrome

     Use any of the following workarounds (For the current browser session):

     Workaround 1:

     1. Navigate to the directory that contains the Chrome browser installation files. For example, C:\Program Files (x86)\Google\Chrome\Application>
     2. At the command prompt, run the following command:
        chrome.exe --disable-web-security --disable-gpu --user-data-dir=chromeTemp
     3. Open the results file.

     Workaround 2:

     1. Navigate to the directory that contains the Chrome browser installation files. For example, C:\Program Files (x86)\Google\Chrome\Application>
     2. At the command prompt, run the following command:
        chrome.exe --allow-file-access-from-file
     3. Open the results file.

   Warning

   Note

   If you move the exported XML file, make sure to move the XSLT file along with it. The XSLT file name is xccdf.xsl (for SCAP 1.0) and xccdf12.xsl (for SCAP 1.2 and 1.3). 

3. Allow ActiveX requests.
4. Scroll to the right side of the browser window and click the down arrows to expand sections of the report. Similarly, click an up arrow to contract a section.

To export an ARF results file

1. Log in to the TrueSight Server Automation console.
2. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
3. One or more job run instances appear in the Content View.
4. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
5. Right-click Server View (or the individual target servers in this view) and select Export Other SCAP Formats > ARF report.
6. In the Export ARF Results dialog box, configure the following settings:
   1. From the scroll bar, select Servers (if you want to store the exported file on a remote server) or Local Computer (to store the exported file on a local drive).
   2. Select a drive on that server.
   3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.

   4. Enter a name for the exported file or files.

      Warning

      Note

      For a job that was run against multiple target servers (and only if you accessed this dialog box from the Server View node): By default, a separate file is exported for each server, and the name that you enter here is appended with the name of each specific server (that is yourFileName_serverName). If you prefer to export the results from all servers in a single file, click Options and then clear the Split Files check box. This option is relevant only for ARF 0.41, and not for ARF 1.1.

   5. Select the report type — either ARF 0.41 (a component of SCAP 1.0) or ARF 1.1 (a component of SCAP 1.3 and 1.2).
7. To start the export, click Save.

To export an ASR results file

1. Log in to the TrueSight Server Automation console.
2. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
3. One or more job run instances appear in the Content View.
4. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
5. Right-click Server View (or the individual targets in this view) and select Export Other SCAP Formats > ASR report.
6. In the Export ASR Results dialog box:
   1. From the scroll bar, select Servers (if you want to store the exported file on a remote server) or Local Computer (to store the exported file on a local drive).
   2. Select a drive on that server.
   3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.
   4. Enter a name for the exported file or files.
   5. Ensure that the report type appears as ASR 0.41 (a component of SCAP 1.0).
7. To start the export, click Save.

To export an AI results file

1. Log in to the TrueSight Server Automation console.
2. Right-click the SCAP Compliance Job name in the Jobs folder and select Show Results.
3. One or more job run instances appear in the Content View.
4. Expand the job run instance of interest.
    Two objects appear under the job run instance: the Rules View and the Server View.
5. Right-click Server View (or the individual targets in this view) and select Export Other SCAP Formats > AI report.
6. In the Export AI Results dialog box:
   1. From the scroll bar, select Servers (if you want to store the exported file on a remote server) or Local Computer (to store the exported file on a local drive).
   2. Select a drive on that server.
   3. To select a folder on the drive, double-click the drive name and continue to double-click folder names to expand to the desired folder.
   4. Enter a name for the exported file or files.
   5. Ensure that the report type appears as AI 1.1 (a component of SCAP 1.3 and 1.2).
7. To start the export, click Save.

Related topic

Creating-and-modifying-SCAP-Compliance-Jobs