Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-41379

[RFE] A report template to capture openscap scan results per host

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 6.16.z
    • Reporting, SCAP Plugin
    • None
    • False
    • sat-endeavour
    • None
    • None
    • None
    • None

      A request like this was done in the past as well through the following BZ:

       

      1905225 - [RFE] To be able to download ARF report for a host in CSV format in Red Hat Satellite 6
      https://bugzilla.redhat.com/show_bug.cgi?id=1905225

       

      [SAT-2313] [RFE] To be able to download ARF report for a host in CSV format in Red Hat Satellite 6 - Red Hat Issue Tracker
      https://issues.redhat.com/browse/SAT-2313

       

      But it was later auto-closed. 

       

      Today, If we have to download and check compliance results for each host, that takes a bit too much time. And there is no way to check their details in a consolidated format as well. 

       

      A DB query like this in Foreman can help fetch similar information i.e. 

       

      SELECT
          l.report_id AS "Report ID",
          h.name AS "Hostname",
          r.reported_at AS "Report Date",
          l.result AS "Result",
          m.value AS "Message",
          s.value AS "Resource",
          m.severity AS "Severity"
      FROM
          logs AS l
      JOIN
          reports AS r ON l.report_id = r.id
      JOIN
          hosts AS h ON r.host_id = h.id
      JOIN
          sources AS s ON l.source_id = s.id
      JOIN
          messages AS m ON l.message_id = m.id 
      WHERE s.value ilike '%xccdf%'
      ORDER BY
          s.value;

       

      Example value:

       

      -[ RECORD 1 ]------------------------------------------------------------------------------------
      Report ID   | 4579
      Hostname    | myhost.example.com
      Report Date | 2026-01-06 15:33:17
      Result      | fail
      Message     | Set Account Expiration Following Inactivity
      Resource    | xccdf_org.ssgproject.content_rule_account_disable_post_pw_expiration
      Severity    | medium
      -[ RECORD 2 ]------------------------------------------------------------------------------------
      Report ID   | 4579
      Hostname    | myhost.example.com
      Report Date | 2026-01-06 15:33:17
      Result      | fail
      Message     | Set Password Maximum Age
      Resource    | xccdf_org.ssgproject.content_rule_accounts_maximum_age_login_defs
      Severity    | medium
      -[ RECORD 3 ]------------------------------------------------------------------------------------
      Report ID   | 4579
      Hostname    | myhost.example.com
      Report Date | 2026-01-06 15:33:17
      Result      | fail
      Message     | Set Password Minimum Age
      Resource    | xccdf_org.ssgproject.content_rule_accounts_minimum_age_login_defs
      Severity    | medium

      This data is already retrievable. It might be possible to develop a report template as well, and that is the main ask of this RFE. 

              Unassigned Unassigned
              rhn-support-saydas Sayan Das
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: