Note: This Feature is only available in Open-AudIT Enterprise
For auditing and management purposes it can be advantageous to baseline individual devices against a fixed, known good device. Baselines enable you to combine audit data with a set of attributes you have previously defined (your baseline) to determine compliance of devices.
For example - you might create a baseline from a device running CentOS 6 which acts as one of your Apache servers in a cluster. You know this particular server is configured just the way you want it but you're unsure if other servers in the cluster are configured exactly the same. Baselines enable you to determine this.
- Identify the device(s) that are your exemplary, or gold image you want to compare similar devices against.
- First focus on what the end need is, are you trying to baseline software, users or Netstat data? What is the important thing(s) to compare and report on?
- Do you have a perfect example of this configuration? Perhaps a device located in a lab environment, or a workstation you use to clone workstation VMs from.
- Create a Baseline for the exemplary device
- Select Manage / Baselines / List Baselines from the Open-AudIT Enterprise menu
- To create a new entry click the Create button in the top-right hand corner
- Detailed instructions on creating Baselines can be found HERE: Baselines
- Determine how often you want to run the Baseline check against the database and create a Scheduled Report
- Select Report / Scheduled Reports from the Open-AudIT Enterprise menu
- To create a new entry click the Create button in the top-right hand corner
- Note - Under Type make sure to select Baseline, and under Group you should select a Group of devices, if applicable to this baseline, that best represent the devices to apply the baseline against. This will prevent erroneous entries.
- More information on Scheduling Tasks can be found HERE: How to Schedule Tasks in Open-AudIT
Note - There are currently no Baseline reports that can be emailed. After a Baseline check is run the user must refer back to the Open-AudIT GUI to see how many devices were audited and the results. These results, however, can be exported.
