Issues Tab - BlueCat Infrastructure Assurance - 26.1.0

BlueCat LiveAssurance User Guide

ft:locale
en-US
Product name
BlueCat Infrastructure Assurance
Version
26.1.0

To access this page, select the Issues tab in the sidebar.

The Issues tab displays all current issues as well as the complete list of all analyzed devices and their associated issues. You can filter by Issue ID, Issue Headline, Device Name, Severity, Label, Assignee, Issues Status, Created Time, Updated Time, and Rule Categories. You can also Export issue data in CSV format by clicking the Download icon at the top of the Issues table.

Navigating the Issues Table

Search Bar

Entering a query in the search bar will bring up the list of issues whose headlines match the search query, as shown in the following image.



The columns in the Issues table may be increased or reduced in width. To increase or decrease the width, hover over the edge of the column until the re-sizing icon is displayed, then drag the edge right or left to increase or decrease the width respectively.

Use the stacked bars icon () to edit or filter issues for individual devices, group of devices, severity, issue resolution, assignee, vendors or rule categories. You can also sort by any column.

Columns may also be automatically resized, by clicking the stacked bars icon and selecting the option to auto-size the column width.

You can choose your columns.

Columns may be swapped with other columns. This can be done by dragging the column title over other columns. The replaced column will then trade places with the moved column.

The Issues table may also be filtered and sorted.

Sort the table by clicking the column title. A small indicator arrow will appear, indicating the sorting order.

Filter the table by selecting the funnel icon .



The checkboxes in the left column allow users to manage multiple issues. The topmost checkbox (in the header row) will allow you to check or uncheck all boxes at once.

The Severity column will display the severity type based on the color flag of each issue.

As shown in the above image, colors range from red to blue to distinguish critical warnings from less severe issues. This allows users to find and resolve issues most likely to cause imminent downtime and to visually assess the type of issue and remedial action required. LiveAssurance assigns a unique ID number to each issue as it occurs. If the circle is solid, it indicates the issue is active. If the circle is hollow, it indicates that the issue is in cooldown state.

By default, issues display in descending order of severity and by date modified.

The ID uniquely identifies the issue. The Headline displays the actual issue information and a brief description of the condition LiveAssurance has observed. The DeviceIP column displays the device management IP address assigned to each device for which an issue has been flagged. Devicecolumn displays the device name assigned to each device for which an issue has been flagged, The Categories column identifies the type of issue. The Vendors column identifies the device vendor and the corresponding Labels. The Assignee column displays who the issue has been assigned to, followed by when the issue was Created and last Updated.



Note: If you do not see a particular issue, look at the number of filters applied. You may need to clear the filters by clicking CLEAR FILTER, as shown in the following image.

Grouping Issues

You can group issues by dragging a column title to Drag here to set row groups. Alternatively, click the stacked bars icon () corresponding to the column title by which you want to group issues.

You can group issues by Headline, Device, Severity, Status, or Assignee, as shown in the following image.



You can even group issues by more than one title, as shown in the following image.



Rules are categorized. There are currently seven different categories:

  • Health Checks
  • CVE
  • High Availability
  • Ongoing Maintenance
  • Organization Standards
  • Regulatory Compliance
  • Security Risks
  • Vendor Best practices
Note: A rule can belong to multiple Rule Categories.

Retaining The Issue Table View

The Issue Table view, including the selected columns, filtering and sorting applied will persist when navigating away from and back to the Issues Page. This enables you to configure your favorite view without having to re-adjust it. This view is saved on your browser and will be retained on the specific endpoint and browser used.

Note: Clicking on the header section in the UI will restore the view to its default setting.

Assignment of Multiple Issues to a Single User

To assign one or more issues to a single user, select the relevant issue(s). A pane appears on the right side of the page. Select the appropriate user from the drop-down list, as shown in the following image.

This will allow you to quickly view any unassigned issues, and ensure that every issue is assigned to a user.


You will then see the status in the Assignee column change to the selected username (admin in the case of the above example) for the selected issues.

Detailed Issue Review

To review a reported issue in more detail, simply click on an issue of interest to update the issue summary drawer on the right-hand side of the page. You do not need to use the checkbox to expand the issue.

The Issue Description section will give you a general description overview and explanation of the problem. Below that you will see Issue Items relating to the reported problem, like the actual NTP servers that are impacted. If you want to remove a specific item, and keep others, you can archive that item by clicking Archive.

The following image is an example of the issue summary drawer.



You can also provide Custom Instructions in the Notes section that gives users the option to add their own notes, which are a great way to supplement the Remediation Steps (recommended) and actionable direction to address the issue.

Note: In this example, this issue has multiple issue items, that is, there are more than one NTP server affected.

You can click Overview to see the detailed view for the issue.

Exclude an Issue Item

You can exclude an Issue Item within an issue persistently. Click the icon corresponding to the issue item you wish to exclude.

Using the same example as above, when you click the icon next to 10.244.29.70, 10.244.29.70 will be excluded from the issue and it will be reflected in the UI. In other words, this entry will disappear from the UI. An entry will be created in the rule configuration with the exclusion pattern set to “10.244.29.70”. To see this entry, click VIEW CONFIGURATION in the Rule Configuration section. You are taken to the Knowledge Explorer tab, where the Excluded Patterns section displays this entry, as shown in the following image.



If you change your mind, you can just remove the entry by clicking DELETE. You can also exclude multiple issue items by clicking ADD NEW. Remember, this will take effect in the next rule evaluation cycle.

Note: With the introduction of the “exclude an issue item” feature, we retire the ability to archive an issue item. The rationale is that you can use the exclude capability to state that you don’t care about a specific issue item. If you change your mind later, you can update the exclusion settings from Knowledge Explorer.