6.7.6. Searching Compliance Reports

Use the Compliance Reports search field to filter the list of available reports on any given subset of hosts.

Procedure

  • To apply a filter, enter the search query in the Search field and click Search. The search query is case insensitive.

Search Use Cases

  • The following search query finds all compliance reports for which more than five rules failed: 

    failed > 5

  • The following search query finds all compliance reports created after January 1, YYYY, for hosts with host names that contain the prod- group of characters: 

    host ~ prod- AND date > "Jan 1, YYYY"

  • The following search query finds all reports generated by the rhel7_audit compliance policy from an hour ago: 

    "1 hour ago" AND compliance_policy = date = "1 hour ago" AND compliance_policy = rhel7_audit

  • The following search query finds reports that pass an XCCDF rule: 

    xccdf_rule_passed = xccdf_org.ssgproject.content_rule_firefox_preferences-auto-download_actions

  • The following search query finds reports that fail an XCCDF rule: 

    xccdf_rule_failed = xccdf_org.ssgproject.content_rule_firefox_preferences-auto-download_actions

  • The following search query finds reports that have a result different than fail or pass for an XCCDF rule: 

    xccdf_rule_othered = xccdf_org.ssgproject.content_rule_firefox_preferences-auto-download_actions

Additional Information

  • To see a list of available search parameters, click the empty Search field.
  • You can create complex queries with the following logical operators: and, not and has. For more information about logical operators, see 「Supported Operators for Granular Search」.
  • You cannot use regular expressions in a search query. However, you can use multiple fields in a single search expression. For more information about all available search operators, see 「Supported Operators for Granular Search」.
  • You can bookmark a search to reuse the same search query. For more information, see 「Creating Bookmarks」.