Administer > Audit and compliance > Compliance > Compliance statuses > Compliance Status thresholds—Device group

Compliance status thresholds—Device group

Whether or not a server is considered Compliant or Non-Compliant is important when viewing device group compliance in the Compliance view. This status is based on a default threshold calculation that you can configure and customize.

Non-Compliant: In the device group Compliance view, in order for a compliance category (Audit, Audit Policy, Software, Patch, or Configuration) to display a status of Non-Compliant, more than 5% of all servers in a group must have the status of Non-Compliant for that category. Another way to understand Non-Compliant for a device group is to remember that when less than 95% of the servers are Compliant, a status of Non-Compliant will display.

Partial-Compliant: In the device group Compliance view, in order for a compliance category (Audit, Audit Policy, Software, Patch, or Configuration) to display a status of Partial-Compliant, more than 2% but less than or equal to 5% of all servers in a group must have the status of Non-Compliant for that category. Another way to understand Partial-Compliant for a device group is to remember that when less than 98% but at least 95% of the servers are Compliant, a status of Partial-Compliant will display.

Compliant: In the device group Compliance view, in order for a compliance category (Audit, Software, Patch, or Configuration) to display a status of Compliant, less than 2% of all servers in a group must have the status of Non-Compliant for that category. Another way to understand Compliant for a device group is to remember that at least 98% of the servers are Compliant.

Device group status is calculated based on all policies (in all compliance categories) attached to all servers that belong to the group. This includes servers in all sub-groups that are children to the selected group.

You can change the default thresholds used to calculate compliance status. For example, you could configure that group compliance status be calculated non-recursively, which would exclude all sub-group server members from the compliance calculation.