The policy summary page displays the status and events related to a policy watch model. These models can be used to track compliance and whether or not policies are being followed correctly.
Clicking the JSON symbol (<>) will open up the JSON view of the hits that triggered the alert.
Use the “Toggle Full” button to open the JSON view box to a fullscreen view.
The toggle directly to the right of the search bar allows you to toggle between viewing issues (policies with hits) and all policies. By default, this page displays only issues.
Clicking a policy expands it to reveal three tabs. The first tab is a chart that displays a graphical representation of the events, both hits and filtered out hits, triggered by this policy model.
The second tab is the “Hits” tab. This tab displays all the hits associated with the policy, not including hits that have been filtered out using a disregard. A disregarded hit will appear under the “Filters” tab.
Clicking the “…” symbol at the end of any hit displays the option to disregard it. Clicking “Disregard” opens up a pop-up window that allows you to create a new disregard based off the key associated with the hit.
In the pop-up window, enter a name and an optional description to describe why the disregard is being added. Once these fields are filled out, click the “SAVE” button to save the disregard. This will show up on the “Policy Filters” page.
The final tab is the “Filters” tab. This tab displays the disregards, or filters, that have been applied to the policy model.
Clicking the “…” symbol at the end of any filter displays the options to either edit or remove it. Clicking “Remove Filter” deletes the filter from the filter list. This displays hits with this key as issues again. Clicking “Edit Filter” opens up a pop-up window that allows you to edit the description of the filter.
When the edit window opens, you will be able to edit the description. The name field cannot be changed. Once finished, click the “SAVE” button to save the disregard with the changes made.
Page last updated: 2021 Oct 13