Instance Security Center score not updating

shawnbaar
Giga Expert

When viewing the new Instance Security Center dashboard's Daily Compliance Score, I notice the score does not update.  It says the last time it was updated was 5/31 and only looks like it contains 5/29-5/30 data.  This is a new Madrid (from Jakarta) instance and we are unfamiliar with this feature.  Is there a plugin I am missing or a scheduled job or report somewhere?  

It appears that it is looking for a 'Daily Compliance Score' widget with a sys_id that does not seem to exist. All that is based on what I saw when inspecting the instance of the Performance Analytics widget on the security_home page.

Thanks for any clarification,

Shawn

1 ACCEPTED SOLUTION

Chris McDevitt
ServiceNow Employee
ServiceNow Employee

Shawnbaar,

 

After taking a quick look at the Docs I noticed that a PA job runs every night to populate this tile. After looking at my instance, I noticed that the Daily Data Collection job had our two underlying Indicator Sources:

 

find_real_file.png

You might want to start your investigation from here.

 

Don't forget to smash that Helpful or Correct button so others can benefit from our conversation.

 

 

View solution in original post

3 REPLIES 3

Chris McDevitt
ServiceNow Employee
ServiceNow Employee

Shawnbaar,

 

After taking a quick look at the Docs I noticed that a PA job runs every night to populate this tile. After looking at my instance, I noticed that the Daily Data Collection job had our two underlying Indicator Sources:

 

find_real_file.png

You might want to start your investigation from here.

 

Don't forget to smash that Helpful or Correct button so others can benefit from our conversation.

 

 

Building on Chris's comment, the following troubleshooting steps suggested by ServiceNow support helped us overcome the same issue:

When the instance compliance score does not update after correctly configuring a hardening item, it is likely related to an issue with the following scheduled jobs.

  1. [PA AppSec] Daily Data Collection
  2. [AppSec] Daily Data Management
Troubleshooting Steps
  1. Open the scheduled job [PA AppSec] Daily Data Collection.
  2. Change the "Run as" field to a valid user (active, not locked out), e.g., instance.sec.user. 
  3. Open the scheduled job [AppSec] Daily Data Management.
  4. Change the "Run as" field to an active user with the "admin" role, e.g., instance.sec.user. Note, this may require configuring the form layout to show "Run as." 
  5. After saving any changes, manually execute [AppSec] Daily Data Management by clicking the "Execute Now" button in the record. 
  6. To validate that the job has run, check to see if your compliance score has appropriately been updated in the Instance Security Center. 
  7. If the compliance score was not updated, verify that the "Run as" user for both jobs is active, not locked out, and maintains the correct roles.

 

Not that the scores shown on the HI portal may still require up to 24hrs to reflect the update upon recalculation.

Brent L_1
Tera Contributor

What if those indicators are missing all together.  How do I get them reinstalled?  or created?