Task 05: Configure Desired State Audit Rule

Laim McKenzie
Tera Contributor

Hi,

 

This is driving me mad because as far as I can tell, everything is right - I've compared it to other posts on here as well and the configuration looks identical?

 

Task:

REQUIREMENT:

1. As the Cloud Dimensions CMDB administrator, using CI Class Manager, configure a desired state audit to meet the following requirements:

Certification Filter:

  • Named Windows Servers Filter and includes all Windows Servers
  • Note: The certification filter defines the scope of the audit which in this case includes all Windows Servers in the CMDB

Certification Template:

  • Named Windows Servers Template and includes certification attribute conditions for Operating Systems that are Windows 2012 R2 Standard, Windows 2016 Standard, Windows 2019 Datacenter
  • Note: The certification template determines what criteria is being used to pass the audit, which in this case includes the 3 operating systems listed

Audit:

  • Named: Windows Audit and is configured to audit which Windows Servers are certified on Windows 2012 R2 Standard, Windows 2016 Standard, Windows 2019 Datacenter and which Windows Servers are not
  • Note: The audit references the template and when run, fails all Windows Servers that are NOT 2012 R2, 2016, or 2019

 

2. From CI Class Manager, from the Windows Server class, run the audit and verify the results.

 

//

 

Screenshots for what I have: (Audit results shows more as I ran it again after it failed verification)

 

 

 

7 REPLIES 7

If you look at the screenshots, it is configured for is one of.

Nishant8
Tera Sage

Hello @Laim McKenzie

Your configuration looks fine from what I can see in the screenshot, at least. Did you run the Compliance Job? It may be required for the task to pass.

If that doesn't work, you can recreate everything once more, as it's possible that some other configuration was unintentionally altered during testing.

 

Regards,

Nishant

Yep. 😞

 

Moved past the task for the time being and currently on Task 8, and all have succeeded since.  If my understanding is correct, if the data for Task 5 was wrong, Task 6 would fail, but that succeeded without issue...

 

TASK 6

"SCENARIO:

Cloud Dimensions is satisfied with their audit results for Windows Servers and now wants to display these results on the compliance scorecard. In addition, to prevent unwanted audit results from displaying on the compliance scorecard, Cloud Dimensions wants to deactivate any baseline audits provided by ServiceNow and only have the Windows Server audit active.

 

REQUIREMENT:

 

1. Deactivate (mark as active-false) ALL base system audits that are shown as active from Compliance > Desired State > Audits. 

    NOTE: Keep the 1 audit you created as active.

2. Execute the CMDB Health Dashboard - Compliance Score Calculation job to calculate the audit results and display them on the CMDB Health Dashboard Compliance Scorecard."