Viewing Enforcement Set Run History

The results of Enforcement Sets runs can be viewed on the Run History page.

To view results of Enforcement Set runs, do one of the following

• In the upper-right corner of the Enforcement Sets page, click Run History.
• In the Enforcement Set list, click on the Enforcement Set whose results you want to see.
• In the bottom-left corner of the Enforcement Set drawer, click View Runs.

The Run History Page

The Run History page displays a list of all Enforcement Set runs and allows you to investigate the results of each run.

Each run is represented by a row in the Run History table. The Run History page consists of the following main elements:

1. Search/Filter bar
2. Run History table
3. Total Runs performed
4. The Actions menu

Run History Table

The Run History table displays a list of Enforcement Set runs and includes the following fields, by default:

• Actions - The icons indicate the type of actions configured in the Enforcement Set.
• Run - The ID number of the run.
• Enforcement Name – The Enforcement Set name.
• Scheduling - Whether the Enforcement Set has been scheduled and whether the Enforcement Action is the Main Action, Post Action, Success Action, or Failure Action.
• Result - Completed, Partially, or Failed.
• Query Name – The saved query that determines on which assets the Enforcement Set is run.
• Start Time – The start date and time of the run.
• End Time – The end date and time of the run.
• Duration - The calculated total fetch duration, in HH:DD:MM format.
• Affected Assets - The total number of assets that match the query.
• Success – The number of assets on which the Enforcement Action ran successfully. Click the number to open the Run drawer and view more information.
• Failed - The number of assets on which the Enforcement Action did not run successfully. Click the number to open the Run drawer and view more information.
• Discovery Cycle - The identifier of the discovery cycle in which the activity occurred. This is presented as the start date and time of the discovery cycle.

Viewing Detailed Run Information and the Enforcement Set Configuration

Click any Enforcement Set run to view detailed information about it, as well as the configuration of the Enforcement Actions. Click the Enforcement Center icon in the header to go to the configuration of the Enforcement Set. The details of each Enforcement Action in the set are displayed on a separate tab.

At the top of each tab, the following information is shown:

• Set Started date and Ended - Start and end date and time of the run.
• Type - Whether the selected Enforcement Action is the Main action, Success action, Failure action or Post action.
• Result - Whether the run completed successfully or failed.
• Affected Assets - The number of assets affected by the run:
  • Successful - The number of assets on which the Enforcement Set ran successfully. Click to see a list of these assets.
  • Failed - The number of assets on which the Enforcement Set run failed. Click to see a list of these assets.
  • Additional - The number of assets on which other actions were performed, when Remove this tag from entities not found in the saved query results is selected on either Axonius - Add Custom Data to Assets or Axonius - Add and Remove Tag. Click the number to see a list of these assets.

Filtering the Run History Table

You can filter the Run History table by selecting from the following lists:

• Search runs - Free-text search on all text fields.

• Enforcement Name - Filters the list by Enforcement Set name to view all runs of that Enforcement Set.

• Action Name - Filters by the Enforcement Action and lists all Enforcement Sets that include that Enforcement Action.

• Result - Filters by the result of the Enforcement Action run:

  • Completed - Shows all Enforcement Set runs that have finished.
  • Failed - Shows all Enforcement Sets where all Actions failed.
  • In Progress - Shows all Enforcement Sets that are still running.
  • Partially - Shows all Enforcement Sets where some Actions completed successfully and some failed.
  • Pending - Shows all Enforcement Sets that are queued to run.
  • Terminated - Shows a list of all Enforcement Sets whose run was terminated.

• From/To date selection - Filters by the date the Enforcement Action was run.

• Duration - From the dropdown, select an operator (Equal to, Greater than, Less than) and enter the time duration (in HH:MM:SS) format) that you want to filter.
  

  • To set seconds, highlight SS and enter a number, up to 59 seconds.
  • To set minutes, highlight MM and enter a number, up to 59 minutes.
  • To set hours, highlight HH and enter a number, up to 99 hours.

• Discovery Cycle - Display only Enforcement Set runs from a specific Discovery Cycle, or Cycles.

The total number of Enforcement Set runs that match the search criteria is displayed on the top left side of the Run History table just under the Filter bar. When no search criteria are selected, the total results represent the total number of runs.