Importing Audit Policy Rules

Importing an audit policy into an audit or snapshot specification allows you to import (and optionally merge) an audit policy’s rules into an audit or a snapshot specification, without keeping a link to the audit policy.

After you import an audit policy, there is no longer a connection to that audit policy. Any changes made to the source audit policy are not reflected where the audit policy was imported into.

To import an audit policy into an audit:

Open an existing audit or snapshot specification from the SA Library:

In the navigation pane, select Library > Audit and Remediation > Audits. Select an operating system: Windows or UNIX. From the content pane, open an audit.

In the navigation pane, open an existing snapshot specification from select Library > Audit and Remediation > Snapshot Specifications. From the content pane, open a snapshot specification.

From the Actions menu, select Link to Policy.

If the audit or snapshot specification already has rules defined, choose to either to overwrite the existing rules or merge the audit policy rules with the existing rules.

Depending on the rule type, merging rules can produce different results. As a best practice, review all resulting rules to make sure that the merged audit policy rules meet your requirements or need to be modified.

If you click Yes, the audit policy will overwrite any existing rules in the audit or snapshot specification.

If you click No, the audit policy will merge the audit policy rules with any existing rules. If any conflicts are found, the audit policy rules will overwrite any existing rules.

From the File menu, select Save to save the audit or snapshot specification.