View Configuration Compliance test results
View Configuration Compliance test results for auditing and remediation. The test results are automatically created during third-party vulnerability integration imports.
Important: You can view the test results created during the third-party vulnerability integration imports in the Vulnerability Manager Workspace. For more information, see List page in the Vulnerability Manager Workspace.
Before you begin
Role required:
- sn_vulc.read to view
- sn_vulc.remediation_owner to view and update
- sn_vulc.delete to delete
About this task
Configuration Compliance does not create or update the test results, but imports them as part of a third-party integration. Once they are viewable in Configuration Compliance, they are remediated using Test Result Groups.
Note: Starting with v14.9 of Configuration Compliance, the following terms have been renamed:
| Terminology prior to v14.9 | Terminology v14.9 onwards |
|---|---|
| Test Result Group | Remediation Task |
| Group Rules | Remediation Task Rules |
| Policy | Test group |
Procedure
Navigate to All > Configuration Compliance > Test Results.
Starting with v15.0 of Configuration Compliance, the following columns appear in the Test Results list.
| Column | Description |
|---|---|
| Active | Indicates if a test result is active. A test result is marked:- True: If the State isn’t Closed. - False: If the State is Closed. |
| Age | Time period for which a test result is active since it was last open.This field is empty for a closed test result. Format: Days HH:MM: SS For more information on how to customize the Age calculation, see the KB1703270 article. |
| Age closed | Time period for which a test result was active before it transitioned to ‘Closed'. When the test result transitions to ‘Closed', the value from the Age column is displayed in the Aged closed field. This field is empty for an active test result. Format: Days HH:MM: SS For more information on how to customize the Age closed calculation, see the KB1703270 article. |
| Closed | Timestamp at which a test result is closed.Format: YYYY-MM-DD HH:MM: SS |
| Last opened | Timestamp at which a test result is opened, that is, when the Active field value changes to true. |
- Open the control that you want to view.
| Field | Description |
|---|---|
| Number | The number assigned to the test during the import process. |
| Source | The system name of the third-party SCA application, or the name entered in the application plugin for the API that is used to communicate with Configuration Compliance. |
| Source ID | The identifier assigned to the control by the SCA application. |
| Result | Passed, Failed, Error, or Unknown. Imported from Qualys. |
| Risk score | Calculator result for this test.Prior to v15.0 of Configuration Compliance, the risk score of a passed test result is set to '0'. Starting with v15.0 of Configuration Compliance, the risk score of the passed test result isn’t changed to '0' so that you can estimate the risk mitigated. The risk score of the passed test result isn’t included in calculating the risk score of a remediation task. |
| Risk rating | Based on a range of risk scores on a 1-5 numeric scale that rates overall risk based on a range of risk scores as 1 - Critical to 5 - None. This field replaces the Priority field in previous versions. |
| State | Calculated from the remediation tasks that the test result belongs to. If the test result belongs to multiple groups, an order of precedence is applied to determine state. |
| Resolution | Calculated from the remediation tasks that the test result belongs to. If the test result belongs to multiple groups, an order of precedence is applied to determine resolution. |
| First seen | Date first imported into Configuration Compliance.Starting with v13.1.1, the First seen field displays the date provided by the scanner. Otherwise, it displays the date first imported into Configuration Compliance. |
| Last seen | Date last imported into Configuration Compliance.Starting with v13.1.1, the Last seen field displays the date provided by the scanner. Otherwise, it displays the date last imported into Configuration Compliance. |
| Last pass | Latest date on which the test result is passed. |
| Test | Name of the test. |
| Configuration item | Name of the CI attached to the test. |
| Technology | Software version running on the CI. |
| Description | Description of the test |
| Expected Values | Expected values configured in Qualys and imported by Configuration Compliance. This value is a Boolean expression that when evaluated to true makes the test result Passed. The expression can be a combination of logical, set, or regular expression operators. |
| Actual Values | Values returned by the test. These values are plugged into the expected values Boolean expression to determine if the result should pass or fail. They’re imported from Qualys.Starting with version 14.9 of Configuration Compliance, the Extended Evidence and Cause of Failure values are added in the Actual Values column. |
| Remediation | Remediation instructions. |
| Related Tabs | |
| Remediation Tasks | Remediation tasks associated with this test result. |
| Test Result History | Related list of test results that show the history of pass/fail results for the same CI/technology/test. |