Viewing SCAP rule results in the console

You can view the rule results of an SCAP Compliance Job in the TrueSight Server Automation Console. A rule can have nine states, such as Pass, Fail, Error, Unknown, and so on (see SCAP-rule-result-states).

To view SCAP rule results

TrueSight Server Automation collects the XCCDF results from the target servers and makes those results available on the TrueSight Server Automation Console.

1. To see job results, right-click the job name in the Jobs folder, and select Show Results.
    Objects representing each run of the job appear in the Content View, identified by the date and time of the run.
2. To see results of a specific job run, expand that job run object.
   Each job run shows two views of the SCAP Compliance Job results:
   • Rules view - Displays the results by checklist rule in the XCCDF benchmark. Use this view to explore SCAP compliance for a specific rule across all targets in the job run.
   • Server view - Displays the results by target server name. Use this view to explore SCAP compliance for a specific target in the job run.
3. Expand the Server view or Rules view. In the Server view, expand a target server.
   The hierarchy of groups and rules contained in the XCCDF benchmark appears, with partial descriptions.
   • Black entries indicate that all rules under the entry have a state of Pass.

   • Red entries indicates that at least one rule under the entry has a state other than Pass. Click the entry to expand the hierarchy and find the non-compliant rules.

     Warning

     Note

     The TrueSight Server Automation Console shows part of the description for each rule. To see the entire text of the rules, you must export the results and open the exported file in a web browser.

4. To see specific rules and their result states, continue to expand the entries until you reach the lowest level in the hierarchy.
    Bold rules indicate a failed result.

Related topic

Creating-and-modifying-SCAP-Compliance-Jobs