Next Topic

Previous Topic

Run Audit

Agents can be scheduled to automatically audit the hardware and software configurations of their managed machines on a recurring basis. Agents report the information back to the server so you can access it even when managed machines are powered down. Audits enable you to examine configurations before they develop into serious problems. The system maintains three types of audits for each machine ID:

  • Baseline audit - The configuration of the system in its original state. Typically a baseline audit is performed when a system is first set up.
  • Latest audit - The configuration of the system as of the last audit. Once per day is recommended.
  • System Info - All DMI / SMBIOS data of the system as of the last system info audit. This data seldom changes and typically only needs to be run once.

The KServer detects changes in a machines's configuration by comparing the latest audit to the baseline audit. The latest audit record is stored for as many days as you specify.

Most of the agent and managed machine data displayed by function pages and Reports are based on the latest audit. The Machine Changes report compares a machine ID's latest audit to a baseline audit. Two alert types specifically address changes between a baseline audit and the latest audit: Application Changes and Hardware Changes.

Latest Audit

Runs a Latest Audit of all selected machine IDs when Schedule is clicked. Captures the state of machines on a frequent basis, such as daily.

Baseline Audit

Runs a Baseline Audit of all selected machine IDs when Schedule is clicked. Run a baseline audit to capture the state of machines in a known working state.

System Info

Collects System Info of all selected machines IDs when Schedule is clicked. System Info displays all DMI / SMBIOS data collected for each managed machine. This data virtually never changes and typically only needs to be run once.

Schedule

Click Schedule to perform an audit of selected machine IDs at the specified time, based on the date/time options selected.

Date/Time

Enter the year, month, day, hour, and minute to schedule this task.

Run Now

Click Run Now to perform an audit of selected machine IDs immediately.

Cancel

Click Cancel to stop the recurring audit on all selected machine IDs. To cancel a previously scheduled audit, select the managed machine whose audit you wish to cancel, then press the Cancel button. Cancel removes Next Audit column information for selected machine IDs.

Run recurring

Executes a script indefinitely at a regular interval. Enter the interval time in day(s) or hour(s).

Note: If the interval is at least one day, then the recurring script runs at the scheduled time every interval. If the interval is less than one day, the interval is added to the last execution time of the script.

Stagger by

The Stagger by setting lets you spread the audit time out when running several machines. Scheduling the same script to run at the same time on multiple machines may excessively load your server and/or internet connection. To automatically spread out the execution times, enter the number of minutes to stagger the start time of each script. When multiple machine IDs are selected, clicking Schedule starts the script for the first machine at the scheduled time. The script for the second machine starts later, based on the number of stagger minutes you specified, and so on.

Skip if offline

Forces the script to run only at the scheduled time of day, within a 15 minute window. If a machine is offline at the scheduled time, then the script does not execute at all. If recurring is set, then the script is rescheduled to run at the next appointed time.

Remind me when accounts need audit scheduled

If checked, displays a pop up warning message if audits have not been scheduled for one or more machine IDs. The warning displays each time you select the Run Audit function.

PCI & Disk Audit

Enables/disables the hardware audit driver for an agent. Only disable the driver if you suspect a driver conflict on the managed machine. The agent can not audit PCI hardware cards if this driver is disabled.

Check-in status

These icons indicate the agent check-in status of each managed machine:

Agent has checked in

Agent has not recently checked in

Agent has never checked in

Online but waiting for first audit to complete

The agent is online but remote control is disabled

Machine.Group ID/System Info

The top line shows the machine ID. The bottom line displays the last time a System Info audit was performed. If a System Info audit is pending, the time displays as red text with yellow highlight.

Latest Audit/Baseline Audit

The top line displays when the Latest Audit data was performed. The bottom line displays the last time a Baseline Audit was performed. If the baseline audit is pending, the time displays as red text with yellow highlight.

Next Audit/Recurring Interval

Displays the time of the next scheduled Latest Audit. The bottom line displays the recurring interval for latest audits. If the latest audit is pending, the time displays as red text with yellow highlight.

Topic 222: Send Feedback