CIS scans
Run your desired compliance scan or an ad hoc scan on your nodes.
Ad hoc, or manual, scans give you the freedom to run a CIS scan on your network straight away. Alternatively, you can schedule scans to run on a regular basis and at times when network traffic is low.
Scan reports provide you with in depth information on not just the timing of scans but the nodes affected and the rules that passed or failed.
-
Guidelines for running scans at scale
You can run Puppet Comply to scan a maximum of 5000 nodes in a batch. Before you run Comply at scale, review the guidelines for configuring the environment and running the scan. The process of running Comply at scale was tested at Puppet Labs. Because many factors affect performance, results in your system environment might vary. -
Run an ad hoc scan
Run your desired compliance scan or an ad hoc scan on your nodes. -
Scheduled scans
In addition to manual ad hoc scans, you can also schedule scans. -
CIS scan reports
The Scans page displays all scans run within the defined scan data retention period.