Skip to Content

Creating a Snapshot Job for FIM compliance

A Snapshot Job takes a snapshot of the status and metadata of objects in the template, compares the snapshot to a previous snapshot, and records all found changes (the deltas). The result is an audit of changes since the last job run.

Warning

To review recommendations for avoiding invalid components, see Prerequisites-for-PCI-FIM.

This procedure describes how to define and run a new Snapshot Job that references a PCI-FIM component template.

  1. In the Console, expand the Component Templates folder and navigate to the PCI-FIM component template that you want to use in the Snapshot Job.
  2. Right-click the component template and select Snapshot.
    worddav2312a9cfbfd5e120582b1df272583b7e.png
  3. In the New Component Discover Job wizard, provide information about the General panel:
    worddava9c40e977f0ba772e4866e3b5203dc1b.png
    • Name — Type an identifying name for this job.
    • Description — Optional.
    • Save in — Click Browse and navigate to the location in the Jobs folder to store this job. To create a new folder from the Select Folder panel, select an existing folder and click Add, and name the new folder.
      worddav6f61d9be1120b353534bb808698f4717.png
  4. Click Next.
  5. In the Component Templates for Filtering panel, verify that the selected component template is correct. The default template shown is the one that you right-clicked at the start of this procedure.
    worddav8f5b0a54f09b46726e056ddb37218277.png
  6. Click Next.
  7. In the Targets panel, expand the Servers folder, select the server smart group that you defined for the PCI FIM program, use the arrow buttons to move it to the right side of the panel, and click Next.
    worddav3d43a9f747f0337381a3db24d5942648.png

  8. (Optional) In the Default Notifications panel, make selections for times and methods notifications each time the job completes.

    Warning

    Use this panel to set different notifications for the Discover and Snapshot Jobs; otherwise, skip this panel and set notifications on the Batch Job.

  9. In the Schedules panel, select Execute Now at the top of the panel.

    Warning

    Select Execute Now for the individual Discover and Snapshot Jobs; then set your desired automatic, recurring schedule on the Batch Job.

  10. Click Finish. The job executes, taking the first snapshot of the objects defined on the Parts tab in the component template.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

TrueSight Server Automation 23.4