Using the Enforcement Center Page

The Enforcement Center page displays a list of all Enforcement Sets and allows you to create, view, modify, duplicate, run, and delete them.

Each Enforcement Set executes a saved query, called the trigger, and then automatically performs the configured actions on the assets that match the query. You can also perform relevant Enforcement Actions on the results of queries run on the Adapter Fetch and Activity Log pages, thus enabling you to create actions on information generated by Axonius itself.

To open the Enforcement Center page, click the icon on the left navigation panel.

The Enforcement Center page consists of the following main elements:

1. Folders pane (left pane)
2. Search/Filter bar
3. Enforcement Sets table (main area)

The Folders Pane

Use the Folders pane to organize your Enforcement Sets into folders which you can create and name according to your needs.

These folders are default:

• All Enforcements - Includes all Enforcement Sets (from Predefined Enforcement Sets, Shared Enforcements, Drafts, and Quick Actions folders).
• Shared Enforcements - Includes Enforcement Sets that you created and/or have access to.
• Drafts - Includes saved Enforcement Sets that are not fully configured.
• Quick Actions - Includes Enforcement Sets that were created as a result of running Quick Actions (AKA Quick Enforcement Actions) on entities. To learn more, see https://docs.axonius.com/docs/working-with-custom-data#adding-custom-fields-to-query-or-filter-results-with-a-quick-enforcement-action and Working with Tags.
• Predefined Enforcements sets - Includes Axonius-defined enforcement sets that you can use as a basis for a new Enforcement Set. Learn more on how to use Predefined Enforcement Sets.

The following describes some rules regarding the system folders:

• The Enforcement Sets in the Predefined Enforcement Sets folder are Read Only and cannot be modified or removed. You can save them as regular Enforcement Sets.
• You can add and remove Enforcement Sets to/from the other folders - Shared Enforcements, Drafts, or Quick Actions folders.
• You cannot delete or rename system folders, including All Enforcements, Shared Enforcements, Drafts, Quick Actions, and Predefined Enforcements sets.
• Under the Shared Enforcements folder only, you can create up to five levels of subfolders, as necessary. When you hover over a Shared Enforcements subfolder, the More menu appears. From here, you can create a new subfolder, rename a subfolder, or delete a subfolder.

See Managing Enforcement Sets for more information.

The Enforcement Sets Table

The Enforcement Sets table displays a list of Enforcement Sets. Each row in the Enforcement Sets table lists one Enforcement Set. To view all Enforcement Actions in the set, expand the row by clicking the down arrow to the left of the Action icons. Users can only see the Enforcement Sets created by other users in the same Data Scope.

The Enforcement Sets table includes the following fields:

• Actions - The icons indicate the types of actions configured in the Enforcement Set.
• Enforcement Name – The Enforcement Set name.
• Query Name – The selected saved query for the Enforcement Set trigger.
• Scheduling Type - The trigger schedule type.
• Next Run - The date and time of the next scheduled run of the Enforcement Set.
• Total Runs – The total number of times the Enforcement Set was run.
• Last Run – The date/time the Enforcement Set was last run.
• Last Run Status - Whether the last run of the Enforcement Set completed, failed, or partially completed.
• Last Updated – The date/time the Enforcement Set was last edited.
• Updated By – The name of the last user who updated the Enforcement Set.
  • The user name is displayed with a prefix:
    • Internal – A user who was defined internally in Axonius by one of the system admins.
    • SAML or LDAP – A user who logged in using the LDAP or SAML based login options.
  • If the user no longer exists in the system, the displayed user name is displayed with a “(deleted)” suffix.
  • Hover over the field to display the user's first and last names in addition to the user name, if this exists.
• Folder Path – the name of the folder and subfolder (if relevant) in which the Enforcement Set is listed.

Filtering and Sorting the Enforcement Sets Table

You can filter and sort the Enforcement Sets to find the set you are looking for.

Filtering

You can filter the Enforcement Sets table by selecting from the following lists:

• Search action – Searches on all text fields of the actions: Name, Main Action, and Query Name.
• Enforcement Name - Filters the list by Enforcement Set name.
• Query – Filters the list for all Enforcement Sets using the selected trigger query.
• Asset Type – Filters by the type of asset to which the Enforcement Action applies.
• Scheduling Type – Filters by the type of schedule configured.
• Category – Filters by the Enforcement Action category.
• From/To date selection – Filters by the date the Enforcement Action was run.

Filtering by Enforcement Set Name

Sorting

You can sort the Enforcement Sets table by any text column.

To sort the table

1. Hover over a column header. A small arrow appears. The up arrow indicates that the column is sorted from low to high. The down arrow indicates sorting from high to low. Sorting columns alphabetically is case insensitive.

   

2. Click the small arrow to set a sort order.

Total Results

The total number of Enforcement Sets found for the search criteria is displayed on the top left side of the Enforcement Sets table just under the Filter bar. If no filter criteria are selected, Total represents the total number of Enforcement Sets defined.

Actions Menu: Duplicating, Deleting, Moving, and Running Enforcement Sets

You can duplicate an Enforcement set in the table. You can copy, delete, move to another folder, one or multiple Enforcement Sets from the Enforcement Sets table.

1. In the Enforcement Sets table, select one or more Enforcement Sets (select only one to duplicate).
2. Click Actions at the top-right of the Enforcement Center table and select one of the following:

   • Run - Runs the selected Enforcement Sets. You cannot run Enforcement Sets in the Drafts folder. To learn more, see Running Enforcement Sets.

   • Duplicate - Creates a copy of the selected Enforcement Set. Use the name provided, or type a new meaningful name. You can also select whether to clone the scheduling by selecting Clone automation settings. To learn more, see Duplicating Enforcement Sets.

   • Delete - Deletes the selected Enforcement Sets from the entire system. To learn more, see Deleting Existing Enforcement Sets.

   • Move To Folder - Move selected Enforcement Sets from one folder to another. To learn more, see Managing Enforcement Sets.

Creating an Enforcement Set

Click Create Enforcement Set to configure a new Enforcement Set. To learn more, see Creating Enforcement Sets.

Viewing Results of Enforcement Set Runs

Click Run History to view the results of Enforcement Sets runs. To learn more, see Viewing Enforcement Set Run History.

Table Navigation Elements

By default, 20 rows are displayed in each table page. You can change the number of displayed rows per page and choose between 20, 50, or 100, by clicking the appropriate icon on the bottom left side of the table:
Use the pagination bar on the bottom right side of the table to move between pages: