1. Cloud Control Management Repository Views Reference
  2. Compliance Views

4 Compliance Views

This chapter provides a description of each compliance view and its columns. Compliance is the conformance to standards, or requirements, or both. Enterprise Manager Compliance Management provides the ability to evaluate the compliance of targets and systems as they relate to business best practices for configuration, security, and storage. This is accomplished by defining, customizing, and managing compliance frameworks, compliance standards, and compliance standard rules. In addition, it provides advice of how to change configuration to bring your targets and systems into compliance.

This chapter contains the following sections:

For examples of how to use views, see Examples.

MGMT$COMPLIANCE_STANDARD_RULE

The MGMT$COMPLIANCE_STANDARD_RULE view contains the lists of all the compliance standard rules. A compliance standard rule is a test to determine if a configuration data change affects compliance. A compliance standard rule is mapped to one or more compliance standards.

Table 4-1 MGMT$COMPLIANCE_STANDARD_RULE

Column Description

RULE_NAME

Display name in English

DESCRIPTION

Description of the rule in English

TARGET_TYPE

Applicable target type of rule

REFERENCE_URL

Not used in this release

RATIONALE

Explains the importance of this rule, and the consequences of noncompliance

FIXTEXT

Explains the steps to bring the target into compliance with respect to this rule

WARNING

Cautionary or caveat note about this rule

RULE_TYPE

Type of rule.

Possible values:

  • Repository

  • Agent

  • Monitoring

MESSAGE

Message recorded for new violation

CLEAR_MESSAGE

Message recorded for clear violation

SEVERITY

The severity of the rule

Possible values:

  • Minor Warning

  • Warning

  • Critical

LIFECYCLE_STATE

Lifecycle status of the rule

Possible values:

  • Development

  • Production

  • Draft

AUTHOR

Author of the rule

OWNER

Owner of the rule

IS_SYSTEM

Specifies whether the rule is system defined

Possible values

  • False

  • True

RULE_DNAME_NLSID

NLSID of the rule display name for non-English users

DESCRIPTION_NLSID

NLSID of the rule description for non-English users

RATIONALE_NLSID

NLSID of the rule impact for non-English users

FIXTEXT_NLSID

NLSID of the rule recommendation for non-English users

WARNING_NLSID

NLSID of the rule warning for non-English users

RULE_TYPE_CODE

Code to represent the type of compliance standard rule.

Possible values:

  • 1: Repository

  • 2: Agent

  • 3: Monitoring

SEVERITY_CODE

Code to represent the severity of the compliance standard rule.

Possible values:

  • 18: Minor Warning

  • 20: Warning

  • 25: Critical

LIFECYCLE_STATE_CODE

Code to represent the status of the lifecycle of the compliance standard rule.

Possible values:

  • 1: Development

  • 2: Production

  • 3: Draft

IS_SYSTEM_CODE

Code to represent whether the compliance standard rule is system defined.

Possible values:

  • 0: False

  • 1: True

MGMT$COMPLIANCE_STANDARD

The MGMT$COMPLIANCE_STANDARD view contains the lists of all compliance standards. A compliance standard is a collection of checks or rules. It is the Enterprise Manager representation of a compliance control that must be tested against some set of IT infrastructure to determine if the control is being followed.

Table 4-2 MGMT$COMPLIANCE_STANDARD

Column Description

CS_NAME

Display name in English

TARGET_TYPE

Applicable target type of the compliance standard

AUTHOR

Author of the compliance standard

OWNER

Owner of the compliance standard

VERSION

Version of the compliance standard

KEYWORDS

Keywords associated with the compliance standard

LIFECYCLE_STATUS

Lifecycle status of the compliance standard

Possible values:

  • Development

  • Production

AUTO_ENABLE

Specifies whether the compliance standard should be associated with applicable target automatically

Possible values:

  • False

  • True

DESCRIPTION

Description of the compliance standard in English

REFERENCE_URL

Not used in this release

FRONT_MATTER

Introductory text of the compliance standard

REAR_MATTER

Concluding text of the compliance standard

NOTICE

Legal notice or copyright text about compliance standard

IS_SYSTEM

Specifies whether the compliance standard is system defined

Possible values:

  • False

  • True

CS_DNAME_NLSID

NLSID of the standard display name for non-English users

LIFECYCLE_STATE_CODE

Code representing the status of the compliance standard lifecycle.

Possible values:

  • 1: Development

  • 2: Production

AUTO_ENABLE_CODE

Code representing whether the compliance standard should be automatically associated with an applicable target.

Possible values:

  • 0: False

  • 1: True

DESCRIPTION_NLSID

NLSID of the compliance standard description for non-English users

NOTICE_NLSID

NLSID of the legal notice or copyright text about the compliance standard for non-English users

IS_SYSTEM_CODE

Code representing whether the compliance standard is system defined.

Possible values:

  • 0: False

  • 1: True

CS_TYPE

Type of compliance standard

CS_TYPE_CODE

Code representing the type of compliance standard.

Possible values:

  • 1: Repository

  • 2: WebLogic server signature

  • 3: Real-time monitoring

MGMT$COMPLIANCE_STANDARD_GROUP

The MGMT$COMPLIANCE_STANDARD_GROUP view contains the lists of the compliance standard groups.

Table 4-3 MGMT$COMPLIANCE_STANDARD_GROUP

Column Description

CSG_NAME

The display name in English

AUTHOR

Author of the compliance standard group

OWNER

Owner of the compliance standard group

VERSION

The version of the compliance standard group

LIFECYCLE_STATUS

Lifecycle status of the compliance standard group

Possible values:

  • Development

  • Production

DESCRIPTION

Description of the compliance standard group in English

REFERENCE_URL

Not used in this release

FRONT_MATTER

Introductory text of the compliance standard group

REAR_MATTER

Concluding text of the compliance standard group

NOTICE

Legal notice or copyright text about the compliance standard group

IS_SYSTEM

Specifies whether the compliance standard group is system defined

Possible values:

  • False

  • True

CSG_DNAME_NLSID

NLSID of the compliance standard group display name for non-English users

LIFECYCLE_STATE_CODE

Code representing the status of the compliance standard group lifecycle.

Possible values:

  • 1: Development

  • 2: Production

DESCRIPTION_NLSID

NLSID of the compliance standard group description for non-English users

NOTICE_NLSID

NLSID of the legal notice or copyright text about the compliance standard group for non-English users

IS_SYSTEM_CODE

Coderepresenting whether the compliance standard group is system defined.

Possible values:

  • 0: False

  • 1: True

MGMT$CS_EVAL_SUMMARY

The MGMT$CS_EVAL_SUMMARY view contains the lists of all the root compliance standard scores.

Table 4-4 MGMT$CS_EVAL_SUMMARY

Column Description

CS_GUID

Unique identifier of compliance standard

Note: You can obtain this value from the MGMT$COMPLIANCE_STANDARD view.

TARGET_GUID

Unique identifier of target

CS_NAME

Internal name of the compliance standard

CS_INAME

English display nameof the compliance standard

CS_AUTHOR

Author of the compliance standard

CS_VERSION

Version of the compliance standard

TARGET_NAME

Target name

TARGET_TYPE

Target type

COMPLIANT_RULES

Number of compliant rules in the compliance standard hierarchy for that target

CRITICAL_RULES

Number of critical rules in the compliance standard hierarchy for that target

WARN_RULES

Number of warning rules in the compliance standard hierarchy for that target

MWARN_RULES

Number of minor warning rules in the compliance standard hierarchy for that target

NON_COMPLIANT_RULES

Number of noncompliant rules in the compliance standard hierarchy for that target

ERROR_RULES

Number of error rules in the compliance standard hierarchy for that target

UNKNOWN_RULES

Number of unknown rules in the compliance standard hierarchy for that target

CRIT_VIOLATIONS

Total critical violations raised by compliance standard

WARN_VIOLATIONS

Total warning violations raised by compliance standard

MWARN_VIOLATIONS

Total minor warning violations raised by compliance standard

TOTAL_VIOLATIONS

Total violations raised by compliance standard

COMPLIANCE_SCORE_LEVEL

Specifies the compliance score level

Possible values:

  • Compliant

  • Critical

  • Warning

LAST_EVALUATION_DATE

Last score evaluation date

COMPLIANCE_SCORE

Compliance score of standard

IS_SCORE_VALID

Specifies whether the compliance score is valid.

CS_TYPE

The type of compliance standard

Possible values:

  • Repository

  • WebLogic Server Signature

  • Real-time Monitoring

CS_DNAME_NLSID

NLSID of the standard display name for non-English users

COMPLIANCE_SCORE_LEVEL_CODE

Represents compliance score level

Possible values:

  • 0: Compliant

  • 1: Critical

  • 2: Warning

IS_SCORE_VALID_CODE

Represents whether the compliance score is valid

Possible values:

  • 0: False

  • 1: True

CS_TYPE_CODE

Represents the type of compliance standard

Possible values:

  • 1: Repository

  • 2: WebLogic Server Signature

  • 3: Real-time monitoring

MGMT$COMPOSITE_CS_EVAL_SUMMARY

The MGMT$COMPOSITE_CS_EVAL_SUMMARY view contains the list of all the compliance standard scores. Each row in the MGMT$COMPOSITE_CS_EVAL_SUMMARY view represents the results for a top level compliance standard or top level target, and an included compliance standard or member target.

When you include a compliance standard within another top level compliance standard, the included standard must be of the same target type as the top level compliance standard. If the top level compliance standard is a composite target type, then the included standard can be one of the member target types of the composite target type.

Note:

A root compliance standard is associated to a root target (of composite target type). Compliance standards are associated to member targets of the same applicable target type and target filter criteria.

Table 4-5 MGMT$COMPOSITE_CS_EVAL_SUMMARY

Column Description

ROOT_CS_GUID

Unique identifier of the root compliance standard

Note: You can obtain this from the MGMT$COMPLIANCE_STANDARD view.

RQS_GUID

Unique identifier of compliance standard within root compliance standard context

CS_GUID

Unique identifier of compliance standard

Note: You can obtain this from the MGMT$COMPLIANCE_STANDARD view.

ROOT_TARGET_GUID

Unique identifier of root target

TARGET_GUID

Unique identifier of target

ROOT_CS_NAME

Internal name of root compliance standard

ROOT_CS_INAME

English display name of root compliance standard

ROOT_CS_AUTHOR

Author of root compliance standard

ROOT_CS_VERSION

Version of root compliance standard

CS_NAME

Internal name of compliance standard

CS_INAME

Display name in English

CS_AUTHOR

Author of standard

CS_VERSION

Version of standard

ROOT_TARGET_NAME

Root target name

ROOT_TARGET_TYPE

Root target type

TARGET_NAME

Target name

TARGET_TYPE

Target type

COMPLIANT_RULES

Number of compliant rules in the compliance standard hierarchy for that target or member target

CRITICAL_RULES

Number of critical rules in the compliance standard hierarchy for that target or member target

WARN_RULES

Number of warning rules in the compliance standard hierarchy for that target or member target

MWARN_RULES

Number of minor warning rules in the compliance standard hierarchy for that target or member target

NON_COMPLIANT_RULES

Number of noncompliant rules in the compliance standard hierarchy for that target or member target

ERROR_RULES

Number of error rules in the compliance standard hierarchy for that target or member target

UNKNOWN_RULES

Number of unknown rules in the compliance standard hierarchy for that target or member target

CRIT_VIOLATIONS

Total critical violations raised by compliance standard

WARN_VIOLATIONS

Total warning violations raised by compliance standard

MWARN_VIOLATIONS

Total minor warning violations raised by compliance standard

TOTAL_VIOLATIONS

Total violations raised by compliance standard

SUPPRESSED_CRIT

Number of suppressed critical violations

SUPPRESSED_WARN

Number of suppressed warning violations

SUPPRESSED_MWARN

Number of suppressed minor warning violations

COMPLIANCE_SCORE_LEVEL

Compliance score level

Possible values:

  • Compliant

  • Critical

  • Warning

LAST_EVALUATION_DATE

Last evaluation date

COMPLIANCE_SCORE

Compliance score of standard

ROOT_CS_NAME_NLSID

NLSID of the name of the root compliance standard for non-English users

CS_NAME_NLSID

NLSID of the name of the compliance standard for non-English users

COMPLIANCE_SCORE_LEVEL_CODE

Code representing the compliance score level.

Possible values:

  • 0: Compliant

  • 1: Critical

  • 2: Warning

IS_SCORE_VALID_CODE

Code representing whether the compliance score is valid.

Possible values:

  • 0: False

  • 1: True

MGMT$CS_RULE_EVAL_SUMMARY

The MGMT$CS_RULE_EVAL_SUMMARY view contains the lists of all the compliance rule scores for the target.

Table 4-6 MGMT$CS_RULE_EVAL_SUMMARY

Column Description

ROOT_CS_GUID

Unique identifier of the root compliance standard

Note: You can obtain this from the MGMT$COMPLIANCE_STANDARD view.

RQS_GUID

Unique identifier of the rule within root compliance standard context

RULE_GUID

Unique identifier of the compliance rule

Note: You can obtain this from the MGMT$COMPLIANCE_STANDARD_RULE view.

ROOT_TARGET_GUID

Unique identifier of the root target

TARGET_GUID

Unique identifier of the target

ROOT_CS_NAME

Internal name of the root compliance standard

ROOT_CS_INAME

Display name of the root compliance standard in English

ROOT_CS_AUTHOR

Author of the root compliance standard

ROOT_CS_VERSION

Version of the root compliance standard

PARENT_CS_NAME

Internal name of the parent compliance standard

PARENT_CS_INAME

Display name of the parent compliance standard in English

PARENT_CS_AUTHOR

Author of the standard of parent compliance standard

PARENT_CS_VERSION

Version of the parent compliance standard

RULE_NAME

Display name of the rule in English

RULE_INAME

Internal name of the rule

ROOT_TARGET_NAME

Root target name

ROOT_TARGET_TYPE

Root target type

TARGET_NAME

Target name

TARGET_TYPE

Target type

TOTAL_VIOLATIONS

Total violations raised by the compliance rule within the compliance standard context

LAST_EVALUATION_DATE

Last evaluation date

COMPLIANCE_SCORE

Compliance score of the rule with respect to compliance standard context

IS_SCORE_VALID

Specifies whether the compliance score is valid

ROOT_CS_NAME_NLSID

NLSID of the name of the root compliance standard for non-English users

PARENT_CS_NAME_NLSID

NLSID of the name of the parent compliance standard for non-English users

IS_SCORE_VALID_CODE

Code representing whether the compliance score is valid.

Possible values:

  • 0: False

  • 1: True

MGMT$CS_GROUP_EVAL_SUMMARY

The MGMT$CS_GROUP_EVAL_SUMMARY view contains the lists of all the compliance standard group scores.

Table 4-7 MGMT$CS_GROUP_EVAL_SUMMARY

Column Description

CSG_GUID

Unique identifier of compliance standard group

Note: You can obtain this from the MGMT$COMPLIANCE_STANDARD_GROUP view.

CSG_NAME

Internal name of compliance standard group

CSG_INAME

Display name in English

CSG_VERSION

Version of compliance standard group

CRITICAL_EVALUATIONS

Number of critical evaluations

WARNING_EVALUATIONS

Number of warning evaluations

COMPLIANT_EVALUATIONS

Number of compliant evaluations

CRITICAL_VIOLATIONS

Total critical violations

WARN_VIOLATIONS

Total warning violations

MWARN_VIOLATIONS

Total minor warning violations

COMPLIANCE_SCORE

Compliance score of compliance standard group

MGMT$CS_TARGET_ASSOC

The MGMT$CS_TARGET_ASSOC view contains the lists all the root compliance standard and target associations.

Table 4-8 MGMT$CS_TARGET_ASSOC

Column Description

CS_GUID

Unique identifier of compliance standard

Note: You can obtain this from the MGMT$COMPLIANCE_STANDARD view.

TARGET_GUID

Unique identifier of target

CS_NAME

Internal name of compliance standard

CS_INAME

Display name in English

CS_AUTHOR

Author of the standard

CS_VERSION

Version of the standard

TARGET_NAME

Target name

TARGET_TYPE

Target type

CRIT_THRESHOLD

Critical threshold value

WARN_THRESHOLD

Warning threshold value

STATUS

Status of the association

Possible values:

  • Enabled

  • Disabled

CS_DNAME_NLSID

NLSID of the standard display name for non-English users

STATUS_CODE

Code representing the status of the association.

Possible values:

  • 1: Enabled

  • 2: Disabled

  • 3: Pending Enable

  • 4: Pending Disable

MGMT$CSR_CURRENT_VIOLATION

The MGMT$CSR_CURRENT_VIOLATION view contains the active violations of all compliance rules.

Table 4-9 MGMT$CSR_CURRENT_VIOLATION

Column Description

ROOT_CS_GUID

Unique GUID of the root compliance standard

RQS_GUID

Unique GUID of rule inclusion within the root compliance standard

RULE_GUID

Unique GUID of the rule

ROOT_TARGET_GUID

Unique GUID of the root target

TARGET_GUID

Unique GUID of the target

POLICY_GUID

Unique GUID of the policy (repository rule)

KEY_VALUE

The key value of the violation

COLLECTION_TIMESTAMP

The timestamp when the violation occurred

VIOLATION_GUID

Unique GUID identifying the violation

VIOLATION_LEVEL

Specifies the priority level of the violation

Possible values:

  • 18: Minor warning

  • 20: Warning

  • 25: Critical

RULE_TYPE

Specifies the type of compliance rule being violated

Possible values:

  • 1: Repository rule

  • 2: Guardian rule

  • 3: Compliance real-time rule

ANNOTATED_FLAG

Not used in this release

MESSAGE

Violation message of the rule

MESSAGE_NLSID

NLSID of the violation message of the rule

MESSAGE_PARAMS

Violation message parameters

ACTION_MESSAGE_NLSID

Not used in this release

ACTION_MESSAGE_PARAMS

Not used in this release

MGMT$CSR_VIOLATION_CONTEXT

The MGMT$CSR_VIOLATION_CONTEXT view contains the violation context, that is extra columns defined in the rule to be collected for a violation

Table 4-10 MGMT$CSR_VIOLATION_CONTEXT

Column Description

VIOLATION_GUID

Unique GUID identifying the violation

COLLECTION_TIMESTAMP

Timestamp at which the violation occurred

COLUMN_NAME

The name of the column of the violation context

COLUMN_TYPE

Type of the column name

Possible values:

  • 1: Numeric

  • 2: String

COLUMN_VALUE

Specifies the numeric value of the column

Note: Applies only when COLUMN_TYPE is set to 1

COLUMN_STR_VALUE

Specifies the string value of the column

Note: Applies only when COLUMN_TYPE is set to 2

MGMT$EM_RULE_VIOL_CTXT_DEF

The MGMT$EM_RULE_VIOL_CTXT_DEF view stores the violation context definition of compliance standard rules. Each row stores one violation column definition of a compliance standard rule.

Table 4-11 MGMT$EM_RULE_VIOL_CTXT_DEF

Column Description

RULE_GUID

Unique GUID of the compliance standard rule

COLUMN_INAME

Internal name of the column

COLUMN_DNAME

Display name of the column

COLUMN_DNAME_NLSID

The NLSID of the display name of the column

COLUMN_TYPE

Data type of the column.

Possible values:

  • 1: Number

  • 2: String

COLUMN_POSITION

Position of the column within the violation context definition

IS_KEY

Specifies whether the column is a key column (1=key column)

IS_HIDDEN

Specifies whether to show or hide the violation column when viewing the violation in the rule violations UI.

Possible values:

  • 0: Show

  • 1: Hide

LINK_TEMPLATE

Not used in the current release

LINK_ENCODE

Not used in the current release

IS_LINK_EM_PAGE

Not used in the current release

MGMT$RULE_KEYWORD

The MGMT$RULE_KEYWORD view stores the keyword list for each rule.

Table 4-12 MGMT$RULE_KEYWORD

Column Description

RULE_GUID

Unique GUID of the rule

KEYWORD_NAME

Keyword name

KEYWORD_NAME_NLSID

NLSID of the name of the keyword list

IS_SYSTEM

Specifies whether it is a system-defined or a user-defined key word.

MGMT$CS_KEYWORD

The MGMT$CS_KEYWORD view stores the keyword list for each compliance standard.

Table 4-13 MGMT$CS_KEYWORD

Column Description

CS_GUID

Unique GUID of the compliance standard

KEYWORD_NAME

Keyword name

KEYWORD_NAME_NLSID

NLSID of the name of the keyword list

IS_SYSTEM

Specifies whether it is a system-defined or a user-defined key word.

MGMT$CS_GROUP_KEYWORD

The MGMT$CS_GROUP_KEYWORD view stores the keyword list for each standard group.

Table 4-14 MGMT$CS_GROUP_KEYWORD

Column Description

CSG_GUID

Unique GUID of the standard group

KEYWORD_NAME

Keyword name

KEYWORD_NAME_NLSID

NLSID of the name of the keyword list

IS_SYSTEM

Specifies whether it is a system-defined or a user-defined key word.

MGMT$CS_RULE_ATTRS

The MGMT$CS_RULE_ATTRS view contains the lists of all the compliance rules attributes.

Table 4-15 MGMT$CS_RULE_ATTRS

Column Description

RULE_GUID

Unique identifier of the compliance rule.

RULE_INAME

Internal name of the compliance rule.

RULE_DNAME

English display name.

DESCRIPTION

English description of the compliance rule.

TARGET_TYPE

Applicable target type of the compliance rule.

REFERENCE_URL

Reference URL.

RATIONALE

Explains the importance of this compliance rule and the consequences of noncompliance.

FIXTEXT

Explains the necessary steps to bring the target into compliance with respect to this rule.

WARNING

Cautionary or caveat note about this rule

CHECK_GUID

Internal unique identifier.

MESSAGE

Message recorded for new violation.

CLEAR_MESSAGE

Message recorded for clear violation.

SEVERITY

Severity of the compliance rule.

VERSION

Version of the compliance rule.

LIFECYCLE_STATE

Lifecycle status of the compliance rule.

AUTHOR

Author of the compliance rule.

OWNER

Owner of the compliance rule.

LAST_UPDATED_DATE

Timestamp of the last edit to the compliance rule.

LAST_UPDATED_BY

User who edited rule.

EVAL_ALWAYS

Flag to suggest evaluation roll-up mandatory.

TABLE_NAMES

Table names for the compliance rule.

RULE_DNAME_NLSID

Rule display name NLSID for nonEnglish users.

DESCRIPTION_NLSID

Rule description NLSID for nonEnglish users.

RATIONALE_NLSID

Rule impact NLSID for nonEnglish users.

FIXTEXT_NLSID

Rule recommendation NLSID for nonEnglish users.

WARNING_NLSID

Rule warning NLSID for nonEnglish users.

MESSAGE_NLSID

Rule message NLSID for nonEnglish users.

CLEAR_MESSAGE_NLSID

Rule clear message NLSID for nonEnglish users.

RULE_TYPE

Code to represent the type of rule.

Possible values:

  • 1: Repository

  • 2: Agent

  • 3: Monitoring

IS_SYSTEM

Code to represent whether the rule is system defined.

Possible values:

  • 0 - False

  • 1 - True

MGMT$CS_HIERARCHY

The MGMT$CS_HIERARCHY view contains all the standard hierarchy metadata.

Table 4-16 MGMT$CS_HIERARCHY

Column Description

PARENT_GUID

Unique identifier of the parent. It can refer to the compliance standard or the rule folder GUID.

PARENT_TYPE_NAME

The name of the parent type.

Possible values:

  • null parent

  • compliance standard

  • rulefolder

PARENT_TYPE

The parent type.

Possible values:

  • =0: null parent

  • =1: compliance standard

  • =2: rulefolder

CHILD_GUID

Unique identifier of the child. This can refer to the compliance standard, rule folder, or rule GUID

CHILD_TYPE_NAME

The name of the child type.

Possible values:

  • =1: compliance standard

  • =2: rulefolder

  • =3: rule

CHILD_TYPE

The child type.

Possible value:

  • =1: compliance standard

  • =2: rulefolder

  • =3: rule

CHILD_POSITION

Position of the child with respect to immediate peer nodes.

IMPORTANCE_LEVEL_NAME

Name of the importance level:

Possible values:

  • high

  • normal

  • low

IMPORTANCE_LEVEL

Importance level.

Possible values:

  • =1: high

  • =2: normal

  • =3: low

MGMT$CS_RQS_HIERARCHY

The MGMT$CS_RQS_HIERARCHY view contains standard runtime hierarchy metadata. Note that the primary key is PARENT_RQS_GUID, PARENT_GUID, CHILD_RQS_GUID, CHILD_GUID.

Table 4-17 MGMT$CS_RQS_HIERARCHY

Column Description

ROOT_CS_GUID

Unique identifier of the root compliance standard.

PARENT_RQS_GUID

Unique identifier of the parent with respect to the inclusion within the root compliance standard.

PARENT_GUID

Unique identifier of the parent.

PARENT_TYPE

The parent type.

Possible values:

  • =0: null

  • =1: compliance standard

  • =2: rulefolder

CHILD_RQS_GUID

Unique identifier of the child with respect to the inclusion within the root compliance standard.

CHILD_GUID

Unique identifier of the child.

CHILD_TYPE_NAME

The name of the child type.

Possible values:

  • =1: compliance standard

  • =2: rulefolder

  • =3: rule

CHILD_TYPE

The child type.

Possible value:

  • =1: compliance standard

  • =2: rulefolder

  • =3: rule

CHILD_POSITION

Position of the child with respect to immediate peer nodes.

MGMT$CS_RULEFOLDER

The MGMT$CS_RULEFOLDER view contains all rule folder metadata.

Table 4-18 MGMT$CS_RULEFOLDER

Column Description

RULEFOLDER_GUID

Unique identifier of the compliance standard rule folder.

CS_GUID

Unique identifier of the compliance standard to which the rule folder belongs.

RULEFOLDER_INAME

Internal name of rule folder

RULEFOLDER_DNAME

Display name of rule folder

DESCRIPTION

Description of rule folder

REFERENCE_URL

Reference URL

RULEFOLDER_DNAME_NLSID

NLSID of the rule folder display name

DESCRIPTION_NLSID

NLSID of the description name

MGMT$CSG_HIERARCHY

The MGMT$CSG_HIERARCHY view contains compliance standard group hierarchy metadata.

Table 4-19 MGMT$CSG_HIERARCHY

Column Description

PARENT_GUID

Unique identifier of the parent.This can refer to either the compliance group or the compliance subgroup GUID.

PARENT_TYPE_NAME

The name of the parent type.

Possible values:

  • parent

  • compliance group

  • subgroup

PARENT_TYPE

The parent type.

Possible values:

  • =0: null parent

  • =4: compliance group

  • =5: subgroup

CHILD_GUID

Unique identifier of the child. This can refer to compliance standard or subgroup.

CHILD_TYPE_NAME

Description of the rule folder

CHILD_TYPE

The child type.

Possible values:

  • =1: compliance standard

  • =2: rulefolder

  • =3: rule

CHILD_POSITION

Position of the child with respect to immediate peer nodes

IMPORTANCE_LEVEL

Importance level.

Possible values:

  • =1: high

  • =2: normal

  • =3: low

MGMT$CSG_SUBGROUP

The MGMT$CSG_SUBGROUP view contains the em_csg_subgroup attributes.

Table 4-20 MGMT$CSG_SUBGROUP

Column Description

SUBGROUP_GUID

Unique identifier of the subgroup.

CSG_GUID

Unique identifier of compliance standard group.

Note: You can obtain this from the MGMT$COMPLIANCE_STANDARD_GROUP view.

SUBGROUP_INAME

Internal name of the subgroup

SUBGROUP_DNAME

Display name of the subgroup

DESCRIPTION

Description of the subgroup

REFERENCE_URL

Reference URL.

SUBGROUP_DNAME_NLSID

NLSID of the subgroup display name

DESCRIPTION_NLSID

NLSID of the subgroup description

MGMT$CSR_TARGET_ASSOC

This MGMT$CSR_TARGET_ASSOC view contains rule and target association settings information.

Table 4-21 MGMT$CSR_TARGET_ASSOC

Column Description

SUBGROUP_GUID

Unique identifier of the subgroup.

RQS_GUID

Unique identifier of the rule inclusion within the root compliance standard.

RULE_GUID

Unique identifier of the rule

ROOT_TARGET_GUID

Unique identifier of the root target

TARGET_GUID

Unique identifier of the target

IMPORTANCE

Importance of this association link within a compliance standard hierarchy

OBJECT_TYPE_NAME

Name of the object type

OBJECT_TYPE

Object type

Possible values:

  • =1: target type

  • =2: target

EDIT_VERSION

This version number is increased by 1 after each edit. Used for concurrency control.

CRITICAL_EDIT_VERSION

This version number is increased by 1 after each critical edit. Used for concurrency control

REASON

Reason for enabling or disabling the association

STATUS_NAME

Status name

Possible values:

  • enabled

  • disabled

  • pending enable

  • pending disable

  • failed

  • system disabled

STATUS

Status value

Possible values:

  • =1: enabled

  • =2: disabled

  • =3: pending enable

  • =4: pending disable

  • =5: failed

  • =6: system disabled

STATUS_CODE_NAME

Status code name

Possible values:

  • user

  • system

STATUS_CODE

Status code value

Possible values:

  • =1: user

  • =2: system

MGMT$CSRF_TARGET_ASSOC

This MGMT$CSRF_TARGET_ASSOC view contains rule folder and target association settings information.

Table 4-22 MGMT$CSRF_TARGET_ASSOC

Column Description

ROOT_CS_GUID

Unique identifier of the compliance standard rule folder

RQS_GUID

Unique identifier of the rule folder inclusion within the root compliance standard

RULEFOLDER_GUID

Unique identifier of the rule folder

ROOT_TARGET_GUID

Unique identifier of the root target

TARGET_GUID

Unique identifier of the target

IMPORTANCE

Importance of this association link within a compliance standard hierarchy

OBJECT_TYPE_NAME

Name of the object type

OBJECT_TYPE

Object type

Possible values:

  • =1: target type

  • =2: target

EDIT_VERSION

This version number is increased by 1 after each edit. Used for concurrency control.

CRITICAL_EDIT_VERSION

This version number is increased by 1 after each critical edit. Used for concurrency control

REASON

Reason for enabling or disabling the association

STATUS_NAME

Status name

Possible values:

  • Enabled

  • Disabled

  • Pending enable

  • Pending disable

  • Failed

  • System disabled

STATUS

Status value

Possible values:

  • =1: enabled

  • =2: disabled

  • =3: pending enable

  • =4: pending disable

  • =5: failed

  • =6: system disabled

STATUS_CODE_NAME

Status code name

Possible values:

  • user

  • system

STATUS_CODE

Status code value

Possible values:

  • =1: user

  • =2: system

IS_CUSTOMIZED_LABEL

Label for specifying customization

Possible values:

  • =1: yes

  • =0: no

IS_CUSTOMIZED

Specifies if there is customization

Possible values:

  • =1: yes

  • =0: no

MGMT$REPO_RULE_CHK_DETAILS

This MGMT$REPO_RULE_CHK_DETAILS view contains the rule check details.

Table 4-23 MGMT$REPO_RULE_CHK_DETAILS

Column Description

RULE_GUID

Unique identifier of the rule

SOURCE

Source for the rule

CONDITION

Condition for the rule

CONDITION_TYPE_NAME

Name of the condition type

Possible values:

  • Simple

  • SQL Expression

CONDITION_OP_NAME

Condition operator for the condition

MGMT$REPOSITORY_RULE_BIND_VARS

This MGMT$REPOSITORY_RULE_BIND_VARS view contains the bind variables for the compliance rule.

Table 4-24 MGMT$REPOSITORY_RULE_BIND_VARS

Column Description

RULE_GUID

Unique identifier of the rule for which the bind variable is defined

BIND_COLUMN_NAME

Name of the bind variable to be bound

BIND_COLUMN_TYPE

Type of the bind variable to be bound

MGMT$REPOSITORY_RULE_PARAMS

This MGMT$REPOSITORY_RULE_PARAMS view contains the rule parameters.

Table 4-25 MGMT$REPOSITORY_RULE_PARAMS

Column Description

RULE_GUID

Unique identifier of the rule for which the parameter is defined

PARAM_NAME

Name of the policy parameter

PARAM_NAME_NLSID

NLSID of the policy parameter

PARAM_TYPE

Type of the policy parameter

MGMT$CS_TGT_ASSOC_TXF_REQ

This MGMT$CS_TGT_ASSOC_TXF_REQ view contains the request summary to transfer the compliance association or metadata to the Management Agent.

Table 4-26 MGMT$CS_TGT_ASSOC_TXF_REQ

Column Description

ROOT_TARGET_GUID

Unique identifier of the root target

TARGET_GUID

Unique identifier of the target

ROOT_CS_GUID

Unique identifier of the root compliance standard

RQS_GUID

Unique identifier of the compliance standard inclusion within the root compliance standard

CS_GUID

Unique identifier of the compliance standard

CREATION_TS

Timestamp of the creation

STATUS

Status of the transfer

Possible values:

  • 0: Pending

  • 1: Successfully done

  • 2: Failed

SYNC_ID

Sync ID corresponding to the association. This is required for the status update of the template collections.

IN_PROCESS

For rows with status pending, this column indicates if the row is being processed currently

Possible values:

  • 0: Processing in progress

  • 1: Processing done

SEQ

Note: This column is for internal use only.

Column sequence number. Contains the unique sequence ID of the row. Used to maintain identity across job restarts for Management Agent standards.

MGMT$EM_CS_RULE_EVENT_ERROR

This MGMT$EM_CS_RULE_EVENT_ERROR view stores the error stack when publishing errors for compliance standards or rules.

Table 4-27 MGMT$EM_CS_RULE_EVENT_ERROR

Column Description

ROOT_CS_GUID

Unique identifier of the root compliance standard

CS_GUID

Unique identifier of the compliance standard

RULE_GUID

Unique identifier of the rule

RQS_GUID

Unique identifier of the rule folder inclusion within the root compliance standard

TARGET_GUID

Unique identifier of the target

ROOT_TARGET_GUID

Unique identifier of the root target

VIOLATION_GUID

Unique identifier of the violation

ERROR_MSG

Error message

ERROR_STACK

Error stack trace

ERROR_TIME

Timestamp of the event error

MGMT$CCC_ALL_OBS_BUNDLES

The MGMT$CCC_ALL_OBS_BUNDLES view returns a summary of all observation bundles. Ensure that any query against this view uses filtering on appropriate fields with BUNDLE_START_TIME being the first to take advantage of partitions.

Table 4-28 MGMT$CCC_ALL_OBS_BUNDLES

Column Description

BUNDLE_ID

The bundle to which this observation belongs based on the rule bundle settings

TARGET

Target against which this observation was found

TARGET_TYPE

Type of the target

RULE_NAME

Name of the real-time Monitoring Compliance Standard Rule

ENTITY_TYPE

Entity type of the entity that had an action against it

USER_PERFORMING_ACTION

Name of the user that performed the action

BUNDLE_IN_VIOLATION

Boolean value if the bundle is in violation currently. This means at least one observation in the bundle is unauthorized. True means bundle is in violation

BUNDLE_START_TIME

Date of the first observation in this bundle

BUNDLE_CLOSE_TIME

Date when this bundle was closed

BUNDLE_CLOSE_REASON

Explanation of why this bundle was closed

DISTINCT_OBS_COUNT

Total number of observations in this bundle

AUTHORIZED_OBS_COUNT

Number of observations in this bundle that are currently authorized

UNAUTHORIZED_OBS_COUNT

Number of observations in this bundle that are currently unauthorized

UNAUTH_CLEARED_OBS_COUNT

Number of observations in this bundle that are currently cleared (at one point they were unauthorized)

UNAUDITED_OBS_COUNT

Number of observations in this bundle that are currently unaudited. They have not been evaluated manually or with Change Management integration to determine audit status

MGMT$CCC_ALL_OBSERVATIONS

The MGMT$CCC_ALL_OBSERVATIONS view returns all observations that have occurred. Any query against this view should ensure that filtering is done on appropriate fields with action_time being the first to take advantage of partitions.

Table 4-29 MGMT$CCC_ALL_OBSERVATIONS

Column Description

OBSERVATION_ID

Unique ID given to the observation when detected by the agent

BUNDLE_ID

Bundle this observation belongs to based on rule bundle settings

TARGET

Target this observation was found against

TARGET_TYPE

Type of the target

ENTITY_TYPE

Entity type of the entity that had an action against it

ACTION

Action that was observed

ACTION_TIME

Time the action occurred

USER_TYPE

Type of user that performed the action (that is, OS user versus DB user)

USER_PERFORMING_ACTION

Name of the user that performed the action

ORIGINAL_USER_NAME

Previous user name in the case of a SU/SUDO action (only applicable to some entity types)

AFFECTED_ENTITY_NAME

Name of the entity that was affected by this action (file name, and so on)

AFFECTED_ENTITY_PREVIOUS_NAME

Name of the entity prior to the action. For example, for file rename actions, this would be the old file name.

SOURCE_HOST_IP

Source IP of a connection when an action comes from another host (only applicable to some entity types)

ACTION_PROCESS_ID

Process ID of the process that performed the action (only applicable to some entity types)

ACTION_PROCESS_NAME

Name of the process that performed the action (only applicable to some entity types)

ACTION_PARENT_PROCESS_ID

Process ID of the parent process of the process that performed the action (only applicable to some entity types)

ACTION_PARENT_PROCESS_NAME

Name of the parent process of the process that performed the action (only applicable to some entity types)

ENTITY_PREVIOUS_VALUE

Previous value of the entity (only applicable to some entity types)

ENTITY_NEW_VALUE

New value of the entity (only applicable to some entity types)

FILE_ENTITY_PREVIOUS_MD5_HASH

Previous MD5 hash value of the entity (only applicable to some entity types)

FILE_ENTITY_NEW_MD5_HASH

New MD5 hash value of the entity (only applicable to some entity types)

AUDIT_STATUS

Current audit status of the observation (unaudited, authorized, unauthorized, and so on)

AUDIT_STATUS_SET_DATE

Date the most recent audit status was set

AUDIT_STATUS_SET_BY_USER

User who set the most recent audit status

MGMT$CCC_ALL_VIOLATIONS

The MGMT$CCC_ALL_VIOLATIONS view returns all real-time monitoring violations caused by an observation bundle having at least one unauthorized observation in it.

Table 4-30 MGMT$CCC_ALL_VIOLATIONS

Column Description

RULE_TYPE

Type of rule

Possible values:

  • Repository

  • WebLogic Server Signature

  • Real-time Monitoring

SEVERITY

Severity level of the rule

  • Info

  • Warning

  • Critical

ENTITY_TYPE

Entity type of the observation bundle and all observations inside that bundle

TARGET_TYPE

Target type of the observation bundle and all observations inside that bundle

RULE_NAME

Name of the rule that this violation is against

COMPLIANCE_STANDARD_NAME

Name of the compliance standard that this violation is against.

TARGET

Name of the target that this violation is against.

BUNDLE_ID

Internal ID of the obervation bundle that is in violation. This observation bundle has one or more unauthorized observations in it

BUNDLE_START_TIME

Time that the observation bundle started

BUNDLE_CLOSE_TIME

Time that the observation bundle closed

USER_NAME

User name that performed the actions in this bundle

AUTHORIZED_OBS_COUNT

Number of authorized observations in the observation bundle involved in this violation

UNAUTHORIZED_OBS_COUNT

Number of unauthorized observations in the observation bundle involved in this violation.

UNAUTH_CLEARED_OBS_COUNT

Number of unauthorized-cleared observations in the observation bundle involved in this violation

ROOT_CS_ID

Root compliance standard ID. This is used for the internal representation of the violation context.

RQS_ID

Runtime compliance standard ID. This is used for the internal representation of the violation context

RULE_ID

Internal ID of the rule with the violation.

TARGET_ID

Internal ID of the target with the violation.

ROOT_TARGET_ID

Internal ID of the target hierarchy.

MGMT$CCC_ALL_AGENT_WARNINGS

The MGMT$CCC_ALL_AGENT_WARNINGS view returns all Management Agent warnings that have occurred.

Table 4-31 MGMT$CCC_ALL_AGENT_WARNINGS

Column Description

WARNING_ID

Unique ID representing the Management Agent warning

INITIAL_WARNING_DATE

Time of the initial warning

LATEST_WARNING_DATE

Time of the latest warning

TYPE_DNAME

Type of warning

MESSAGE

Warning message

SEVERITY

Severity level of the warning.

Possible values:

  • Minor Warning

  • Warning

  • Critical

TARGET_ID

Internal ID of the target on which the warning occurred

TARGET_NAME

Name of target

TARGET_TYPE

Type of target

PATTERN

Pattern related to the warning

PATTERN_STRING

Pattern string

FACET_DNAME

Name of the real-time monitoring facet related to the warning

RULE_DNAME

Name of the compliance standard rule related to the warning

CS_DNAME

Name of the compliance standard related to the warning

CS_ID

Internal ID of the compliance standard

ROOT_TARGET_ID

Internal ID of the root target

ROOT_CS_ID

Internal ID of the root compliance standard

RQS_ID

Internal ID of the runtime compliance standard

RULE_ID

Internal ID of the compliance standard rule

COLLECTION_TIME

Time when the warning is collected

WARNING_LEVEL

Warning level.

Possible values:

  • Rule Level Warning

  • Facet Level Warning

  • Pattern Level Warning

WARNING_ACTIVE

Determines if the warning is active.

Possible values:

  • true

  • false

WARNING_SUPPRESSED

Determines if the warning is suppressed.

Possible values:

  • true

  • false

MGMT$CCC_ALL_WATCHDOG_ALERTS

This MGMT$CCC_ALL_WATCHDOG_ALERTS view returns all WatchDog alerts that have occurred.

Table 4-32 MGMT$CCC_ALL_WATCHDOG_ALERTS

Column Description

ALERT_ID

Unique ID representing the WatchDog alert

HOST_NAME

Name of the host on which the alert occurred

AGENT_ID

Internal ID of the Management Agent

ALERT_DATE

Time when the alert occurred

DETAILS

Detail information

COLLECTION_TIME

Time when the alert is collected

PROCESS_NAME

Name of the process related to the alert

MGMT$COMPLIANT_TARGETS

The MGMT$COMPLIANT_TARGETS view returns all evaluation and violation details for all targets. This is the same data that is shown in the Compliance Summary dashboard regions for targets.

Table 4-33 MGMT$COMPLIANT_TARGETS

Column Description

TARGET_NAME

Name of the target

TARGET_TYPE

Target type of the target

CRIT_EVALS

Number of critical-level evaluations

WARN_EVALS

Number of warning-level evaluations

COMPLIANT_EVALS

Number of compliant evaluations

CRIT_VIOLATIONS

Number of critical-level violations

WARN_VIOLATIONS

Number of warning-level violations

MWARN_VIOLATIONS

Number of minor warning-level violations

COMPLIANCE_SCORE

Current compliance score for the target

TARGET_ID

Internal representation of the target

TARTGET_TYPE_INAME

Internal representation of the target type

MGMT$COMPLIANCE_SUMMARY

The MGMT$COMPLIANCE_SUMMARY view returns all evaluation and violation details for compliance standards and frameworks. This is the same data that is shown in the Compliance Summary dashboard regions for compliance standards and frameworks.

Table 4-34 MGMT$COMPLIANCE_SUMMARY

Column Description

ELEMENT_TYPE

Type of element (compliance standard, compliance framework)

ELEMENT_NAME

Display name of the compliance standard or compliance framework

CRIT_EVALS

Number of critical-level evaluations

WARN_EVALS

Number of warning-level evaluations

COMPLIANT_EVALS

Number of compliant evaluations

CRIT_VIOLATIONS

Number of critical-level violations

WARN_VIOLATIONS

Number of warning-level violations

MWARN_VIOLATIONS

Number of minor warning-level violations

COMPLIANCE_SCORE

Current compliance score for the compliance standard or framework

NON_COMPLIANT_SCORE

Current non-compliant score for the compliance standard or framework

AUTHOR

Author of the compliance standard or framework

VERSION

Version of the compliance standard or framework

ELEMENT_ID

Internal ID of the compliance standard or compliance framework

FRAMEWORK_ID

Internal ID of the compliance framework

ELEMENT_INAME

Internal representation of the compliance standard or framework

MGMT$COMPLIANCE_TREND

The MGMT$COMPLIANCE_TREND view returns the last 31 days compliance trend information for compliance frameworks and standards. This is the same data that is shown in the Compliance Summary dashboard trend regions for compliance standards and frameworks.

Table 4-35 MGMT$COMPLIANCE_TREND

Column Description

ELEMENT_TYPE

Type of element (compliance standard, compliance framework)

ELEMENT_ID

Internal ID representation of the compliance standard or framework

ELEMENT_NAME

Display name of the compliance standard or compliance framework

FRAMEWORK_ID

Internal ID representation of the compliance framework

AVG_COMPLIANCE_SCORE

Average compliance score over the last 31 days

DAILY_AVG_VIOLATIONS

Average number of violations per day over the last 31 days

SNAPSHOT_TS

The snapshot time stamp

TOTAL_EVALS

Total evaluations over the last 31 days

ELEMENT_INAME

Internal representation of the compliance standard or framework

MGMT$CCC_DIAG_ANALYTICS

The MGMT$CCC_DIAG_ANALYTICS view is a diagnostic view that can be used to provide information to support around how processing of observation analytics is occurring at the server.

Table 4-36 MGMT$CCC_DIAG_ANALYTICS

Column Description

ENTITY_TYPE

The entity type being checked

NAME

Name of this diagnostic check

VALUE

Result of this diagnostic check

MGMT$CCC_DIAG_QUEUEBACKLOG

The MGMT$CCC_DIAG_QUEUEBACKLOG view is a diagnostic view that can be used to provide information to support around how processing of observations is occurring on the server after they are sent from the Management Agent.

Table 4-37 MGMT$CCC_DIAG_QUEUEBACKLOG

Column Description

STATUS

Whether these bundles are waiting to be processed or currently in process

COUNT

Number of bundles with this state

OLDEST_BUNDLE_DATE

Date of oldest bundle in this state

NEWEST_BUNDLE_DATE

Date of newest bundle in this state

RELATED_BUNDLES_NOT_LOADED

Number of bundles that share observations with these bundles that have not arrived from the Management Agent yet