Having problems with your account or logging in?
A lot of changes are happening in the community right now. Some may affect you. READ MORE HERE

Deploy policy check with a device group and 1 (not all) policy

Deploy policy check with a device group and 1 (not all) policy

We would like to be able to run compliance check with a device group for a certain policy.

Right now the system let you run policy check with a device group, but this trigger policy check for **all policies **.

This is causing performance issue (created 6000+ tasks in our system), so we need a way to reduce the load.

5 Comments
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor
Running a compliance check with a subset of policies applied to a device group could reflect the incorrect status on the devices and hence it is not given as an option in the product. I would reach out to you to discuss this further with you over email/ phone.
Micro Focus Contributor
Micro Focus Contributor

One of the use cases -

Company compliance policy requires some attributes to be changed for devices once every month. If it is not changed even after a month, it is non-compliant. 

So there would be a need to schedule these policy checks once every month. Running policy compliance checks for all other policies will not be required in this specific scenario.

The result of the compliance check can update the compliance of the device only when the compliance fails. If it succeeds, it can leave the older compliance in place.

Micro Focus Frequent Contributor
Micro Focus Frequent Contributor
Status changed to: Waiting for Votes
The idea and use case in the comment section have received an initial review to ensure adherence to our idea submission and community guidelines. More information may be needed at this stage, and we expect the community to help prioritize the idea with comments and community support (votes/kudos)
Valued Contributor.. ihulki Valued Contributor..
Valued Contributor..
It will be very good/useful to have an option to run a test against a single policy for a group of devices. There are many cases where this could be useful (at least from time to time) because it could save quite a time especially in a very large environment, If you think that it could reflect the incorrect status on the devices - maybe there is an option that you put some comment, mark for such devices - after applying only one policy.
Frequent Contributor.. mfrancu Frequent Contributor..
Frequent Contributor..

And why not to have the ability to check it against one rule from a policy.

As well, i've just added a new idea exchange for adding a dashboard on every device view to see only the non-compliant/compliant rules not historical data like we have it right now.

https://community.microfocus.com/t5/NOM-Idea-Exchange/Policy-compliance-dashboard-view-on-device-home-page/idi-p/1791965

 

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.