Viewing Remediation Jobs and Schedules

The Remediation tab lists all the saved remediation jobs and schedules. The Jobs sub-tab lists all the on-demand remediation jobs, and the Schedules sub-tab lists all the remediation jobs that are scheduled to be executed at a later time and date.

Viewing Remediation Jobs

Viewing a Remediation Job

The Jobs tab (Remediation > Jobs tab) lists all remediation jobs, on-demand or scheduled. You can view the following details corresponding to each job:

• Status of the remediation job. 

  • Completed: This status Indicates that the script execution has been completed on all the assets. The script execution result on an asset can be ‘Success’ or ‘Fail.’
    
    This job status is exhibited across different scenarios, such as:

    • Pending jobs are marked completed with a completion message when job execution is aborted for any error or reasons like - invalid user permissions, invalid failed postures, or invalid scripts. 
      
      Hover over  to view the completion message.

    • Parent jobs are marked completed along with a completion message when there are multiple child jobs created for a job.
      
      Hover over  to view the completion message.

  • Executing: This status indicates that the script execution on the assets is currently in progress.

  • Partially completed: This status indicates that the script execution is completed on at least one of the assets. 

  • Pending: This status indicates that the script execution has not yet started. It is not possible to perform any action while the job is in the pending state. 

  • Timeout: This status Indicates that the script execution has exceeded a specified timeout window and has not been completed successfully.
    The timeout window is set to 6 hours by default. If a script execution continues beyond this period, a job is marked as 'Timeout' and is discontinued.

• Name of the remediation job.

• Username of the user who created the remediation job.

• Whether the job is an on-demand job or a scheduled one.

• The number of scripts included in the remediation job.

• Number of assets in scope for the job.

• Number of tagged assets and tags in scope for the job.

• The total number of remediation jobs and quick filters to filter remediation jobs based on status, job type, and schedule. 

You can use QQLs to search for specific remediation jobs. Refer to Search Tokens for Remediation.

Using the Quick Actions Menu 

The Quick Actions menu provides you with quick access to the following helpful job functions. To access the Quick Actions menu, click the icon   on the right side of the job name.  

• View Details & Progress: View more granular information about the job and its current status. Use the left navigation menu to navigate through the job details:

  • Basic Information - Displays the basic information about the job.

  • Assets: The assets covered by the job and the number of remediation scripts associated with the asset. These scripts are segregated based on Successful Scripts, Failed Scripts, and Timeout Scripts. You can also view the script execution details for each script:

    1. Click the number of scripts.
       
       

    2. Copy the correlation UUID for the script for which you want to view the details.
       
       

    3. Navigate to CAR > JOBS tab> Search Jobs box.

    4. Search jobs using the search token, correlation id. Enter the copied correlation UUID after the colon. Script details are displayed.

  • Controls: The selected for the remediation.

  • Scripts: The scripts selected for the remediation.

• Relaunch: Re-launch an on-demand job. When you re-launch a job, you can edit its title and add or remove controls, scripts, and assets. When you re-launch a remediation job, a new on-demand job is created with the same job title. Hence, it is recommended to append the title with a differentiator, such as the current date.

Note: You cannot relaunch a remediation job created in Enhanced Policy Compliance version 1.1.2 or earlier.

• Delete:  Delete the selected job. To delete multiple jobs in one go, select multiple jobs and then click Delete.

Note: You cannot delete a job that is in Pending or Executing status. 

Creating Remediation Job

You can also create a remediation using the Job sub-tab.

1. Click Create Job> Using Controls. On clicking this, you are redirected to the Posture tab to select failed controls.
2. On the Posture tab, select the failed controls and then click the Remediate Now button. The Create Remediation wizard appears to guide you through the various steps required to create a remediation job. For more details, refer to Auto-Remediation topic.

Viewing Remediation Job Schedules

Viewing a Scheduled Remediation Job

After you have created a remediation job to be executed later, it is listed under the Schedules tab (Remediation > Schedules tab). You can view the following details corresponding to each job schedule:

• Status of the schedules. Active or Inactive.

• Name of the schedule

• The date on which the schedule was created

• Username of the user who created the schedule

• Next date for the remediation job in case of a recurring cycle.

• Number of asset tags in scope for the job.

• The total number of scheduled remediation jobs and quick filter to filter remediation job schedules based on status.

You can use QQLs to search for specific scheduled remediation jobs. Refer to Search Tokens for Remediation.

Using the Quick Actions Menu

The Quick Actions menu provides you with quick access to the following helpful functions. To access the Quick Actions menu, click the icon   on the right side of the job name.  

• View: View the basic information of the selected schedule.

• Activate: Activate an inactive schedule. This option is not available for expired schedules.

• Deactivate: Deactivate the active schedule. This option is not available for expired schedules.

• Delete: Delete the selected schedule. To delete multiple scheduled jobs, select multiple scheduled jobs and click Delete.

• Edit: Edit an active schedule. You can edit the schedule title, start and end dates, and recurrence schedule, and also add or remove controls and scripts. You cannot edit an expired schedule or a scheduled job that is currently in Executing state. Additionally, you cannot edit the date in the job to a date that is earlier than the date already included in the schedule.

Note: You cannot edit a scheduled job created in Enhanced Policy Compliance version 1.1.1 or earlier.