Control Indicator not executing, and how to specific supporting data

GordonCook
Mega Contributor

I am trying to set up my first control indicator to understand the behavior, and running into a few problems.

 

The first problem is that the Indicator won't execute or produce results. The second problem is that I don't understand how to correctly specify the data, although I may be able to fix this with trial and error if I can get the Indicator to produce results.

 

So I have created an indicator template, tied to a control objective, and to entities. In this case I want to make sure AV (Cortex) is installed on all user machines. The indicator template created 1,435 Indicators, and I have defined a basic test, count, with a target of 1. The supporting data has specific 'Software Installations' as the Source table and 'Display name' as the supporting data fields, although I'm not sure this is correct. What I intend to do is read from the Software Installations table for each user computer and make sure Cortex is installed. I don't understand why this supporting data template has a Sample size field, or what I should put there.

 

The template is scheduled to run Daily, and the Indicators each show a last run data in the past. I can't get them to run by pressing the 'Execute' button or anything else, and I'm not sure what scheduled job runs them. 

 

Any advice on either question welcome - thanks.

1 REPLY 1

Community Alums
Not applicable

Hi @GordonCook ,

Let me start with when the indicator runs , it's actually based on a scheduled job called "GRC indicator nightly run":

SandeepDutta_0-1721187554917.png

 

To execute the indicator manually, to test you can scroll down on your indicator template, open any indicator from the "Indicators" tab:

SandeepDutta_1-1721187696407.png

Click on "Execute"

SandeepDutta_2-1721187740548.png

 

Now, let's understand "Supporting data", well we have a Scheduled job called "Indicator supporting data collection job", which runs to get the data.

If you click on "Collect supporting data", The following three fields are displayed: