Procedure
Click the New Check button. The b>New Check page appears.
Add rules
Parameters
Parameter | Parameter |
Check name | Enter a baseline check task name. |
Scope of execution | All Hosts: If you use the root account, you can select All Hosts; If you use a sub-user account, All Hosts is unavailable.Select Service Group: Select a service group in the account.Select Host: Select or enter the IP addresses of the hosts that you want to check. Note that you must select a check scope before adding baseline rules.After you select a check scope, the system queries baselines based on the selected hosts. If you are not granted the permissions to access specific selected hosts, the system shows the number of the hosts and provides the set interface.For example, if the hosts you selected include 20 hosts that are not authorized, click Set to grant permissions. |
Baseline rules | The system queries baselines based on the selected hosts.Two categories of baselines are supported: system baselines and application baselines, which are subdivided into baselines of Classified Protection of Cybersecurity of China and the Center for Internet Security (CIS). You can select multiple baselines. When you select a database application baseline, the system may prompt you to obtain authorization if the rule includes baselines that require access permissions. Example: You must grant access permission on 60 check items in the rule. Supported system baselines: CentOS 6/7, RHEL 6/7, and Ubuntu 12/14/16. Supported application baselines: Apache2, MySQL, MongoDB and Nginx. |
Timed check | Turn on the timed check switch and enter a timing expression.The timing expression must be in crontab format. After you click Create and Execute, the system checks whether the format is correct. For more information, see the crontab format described in "Task System".You can move the pointer over the i icon next to the timing expression. The instructions are displayed.If the timed check switch is turned off, you cannot enter a timing expression. |
Description | Describe the baseline. |
Viewing Check Results
1. Click a baseline check item to view the result of the last check.The Check Item View tab is displayed by default. The Check Item View tab shows basic information about the check item and the pass rate and host statistics.On the top bar of the page, the view shows the summary information about the baseline rules based on which the check is performed and the statistical results.
2. Click View Details to view the results of the check item on each checked host. You can query the check results of hosts by host IP, host name, service group, and check result.
3. Locate the check result of a host and click View Details to view the check result details of the check item on this host. You can view information such as the check item name, check content, reference value, and actual value. This data can help you set parameters properly.
Host View
Click the Check Item View button to switch to the Workload View.Workload View shows the basic information about each checked host and the check result statistics of all check items of the baseline check task on the host. You can filter check results of hosts by service group, host IP, and host name.