Page History

...

...

The Application landing or "home" page is displayed after a successful login:

Image RemovedImage Added

It consists of multiple tiles used to display data and information from the most recent snapshot of the selected Application:

...

• the number of Violations or Critical Violations in the Application (the display depends on whether only Critical Violations or ALL Violations are being displayed (see Data Filtering on Critical Violations))
• the number of Rules in the Application that have been triggered during an analysis/snapshot (this figure includes default CAST AIP Rules and also custom rules with IDs above 1,000,000)
• the number of Critical Rules in the Application that have been triggered during an analysis/snapshot
• clicking this tile will take you directly to the Risk investigation view (this can also be accessed by clicking the  button available in the sidebar).

Anchor
tag tag

Tag specific tilestiles 

Various additional tiles are displayed as follows:

Image RemovedImage Added

• these display the number of Violations or Critical Violations in the Application for all the rules that are tagged with a specific tag (the display depends on whether only Critical Violations or ALL Violations are being displayed (see Data Filtering on Critical Violations))
  
• Clicking on any of these tiles navigates to the Risk investigation view (this can also be accessed by clicking the  button available in the sidebar) with the specific tag selected at the top of the table - therefore filtering and displaying only rules that have this tag. "All Rules" will be selected in the Technical Criteria table and the list of rules displayed in the right hand panel are those that correspond to the selected tag.

Image RemovedImage Added

No applicable rules

...

Enabling / disabling the Critical Violations filter will effect the violation count displayed in these tiles:

Technologies Overview tile

Image Removed

Technologies Overview tile

Image Added

• the total number of Violations or Critical Violations in the current Application per specific technology - in other words, the total number of times a Rule or Critical Rule has been violated by an object in the Application for that specific technology (the display depends on whether only Critical Violations or ALL Violations are being displayed (see Data Filtering on Critical Violations))
• Clicking this tile will take you directly to the Risk investigation view with the corresponding technology highlighted in the technology drop down (this can also be accessed by clicking the  button available in the sidebar).
• Drill down click option is disabled if the tile displays "N/A" Violations/Critical Violations.

...

Clicking the tile will take you directly to the Health Measure in the Risk Investigation view (see Security Dashboard - GUI for more information), however, the Risk Investigation view will only show added and removed violation information. Any Health Measure, Technical Criterion or Rule where the number of Added and/or Removed violations is 0, will not be visible. A message will reflect this:

ISO-5055 Tile

The ISO-5055 extension is supported with full functionality. The ISO-5055 tile has been added to automatically display ISO-5055 data, with full drill down capability.

Image Added

Drilling down through this tile will take you to the Risk Investigation view, where the focus will be set to the ISO-5055 Assessment Model (1) showing only the ISO-5055 metrics (2):

Image Added

Configuring Assessment Model drop-down

In versions ≥ 2.11.0, user can add new industry standards to the assessment model drop-down by configuring ed.json file.

Image Added

Application Components tile

...

The Advanced Search feature can be accessed using the icon in the left hand menu:

Image Modified

Enabling the Advanced Search feature

...

This indicates that a "violations index" (on which the feature relies) has not yet been generated. To generate the index the following methods are available:

http://<server>:<port>/<dashboard>/static/diagnostic.html

http://<server>:<port>/<dashboard>/static/default.html

<domain>/violations-index

%CATALINA_HOME%\webapps\<dashboard>\WEB-INF\web.xml

<context-param>
	<param-name>rebuildViolationsSearchIndexesOnStart</param-name>
	<param-value>true</param-value>
</context-param>

@echo off
@echo Computing Violations Indexes ...

util.bat > util.log
@echo --------------------------------

@echo off
setlocal enableDelayedExpansion
@echo Automated Violations Indexes Creation
@echo -------------------------------------
 
for /F "delims== eol=#" %%D in (domains.properties) do (
	@echo Process %%D/violations-index
	start /B titi.bat %%D
	@echo.
)

@echo off
prompt $_
setlocal enableDelayedExpansion
set "domain=%~1"
 
@echo Start  %domain% !DATE!_!TIME!
curl -s -u user:pwd -X PUT http://localhost:8080/<dashboard>/rest/%domain%/violations-index
@echo  is the response from %domain%
@echo Finish %domain% !DATE!_!TIME!

...

When the feature is accessed and the violations index has been generated, the following will be displayed:

Left hand panel

The left hand panel provides a set of filters that can be used to narrow down the search cope. Filters are explained in XXXX.

Right hand panel

The right hand panel list the results of the search. Key points: with no search criteria or filters enabled will show all violations available in the currently selected snapshot indicated by the following text: Image Modified a search field is available for you to enter the object name you are searching for. Results in will be updated in real time. Image Modified you can download the results to an Excel file for portability requirements: Image Modified 20 results are shown. Use the Show More button to display additional results: Image Modified the result lists uses the following columns: Image Modified Option to add/remove the violation from the Action Plan or the Scheduled Exclusion List. Note that to interact with the Action Plan/Scheduled List, your user login must have the role QUALITY_MANAGER/EXCLUSION_MANAGER roles. These can be assigned at user level (when using Default Authentication mode) or via user or group (when using Standard LDAP authentication). Action / Exclusions Indicates whether the violation has been added to the Action Plan or the Scheduled Exclusion List: Image Modified Item has been added to the Action Plan. Image Modified Item has been added to the Scheduled Exclusion List. Object Name Location Displays the object name, and in the case of file based objects (as oppose to Database objects), the location on disk of the object. Status Displays the status of the object in comparison to the previous snapshot - e.g.: Added Updated Deleted Unchanged Image Modified Clicking this icon will take you direct to the object in the Application Investigation view.

Using filters for the Advanced Search

The filters available in the left hand panel enable the search scope to be limited. The following filters can be enabled by expanding the section and selecting with a tick:

...