The user has the ability to select the amount of information to include in the posture information output. By default, basic posture information is included: the posture ID, host ID, control ID, technology ID, technology instance (when applicable), and the compliance status. If an exception has been created, this full exception information is also included: the exception assignee and status, the date/time when the exception was created, when it was last modified, the user who took these actions on the exception, and the date when the exception is set to expire. A glossary of compliance posture information identifies: basic host information and basic control information.
Use the details input parameter to select another level of detail to be included in the policy information output.
By default, the posture information output shows posture information for all hosts (IP addresses) in asset groups assigned to the selected policy, provided the user has permission to view the hosts themselves. If you have a sub-account like a Unit Manager, Scanner or Reader, the posture information output only includes hosts that the account has permission to see.
You can reduce the amount of data being retrieved by only pulling the data that is required for the downstream processes. For example, only download the delta of the changes in posture since the last pull. This can be done using optional input parameters which allow you to set filters to restrict the posture information output to postures info records with certain IP addresses, host IDs, compliance control IDs, compliance posture IDs, posture info records with changes in status since a specified date, and posture info records with a certain compliance status (Passed, Failed or Error).
The optional glossary in the compliance posture information output includes:
Output |
Description |
User List |
List of users who created, modified, or added comments to exceptions in compliance posture info records which are included in the posture information output. For a policy that was edited, the user who most recently edited the exception is listed. |
Host List |
List of hosts in compliance posture info records which are included in the posture information output. This basic host information is included: host ID, IP address, and tracking method. When details=All is specified, this additional information is included: last vulnerability scan date/time, last compliance scan date/time. |
Control List |
List of controls in compliance posture info records which are included in the posture information output. When details=All is specified, this additional information is included: rationale information and technology information for each control. |
Technology List |
List of technologies for controls in compliance posture info records which are included in the posture list output. This information is included only when details=All is specified. |
Evidence List |
List of evidence information for control data points. |