Audit and snapshot rules

You must have permissions to create and configure Audit and Remediation rules. To obtain these permissions, contact your SA administrator. See the SA 10.51 Administer section for more information on permissions.

For information about rules you can set for each type of server object, see one of the following sections for the specific server object that you want to configure a rule for:

Some SA cores may contain legacy content, such as Event Logging, Operating System, and Users and User Groups rules with compliance checks. These checks have been integrated into the CIS policies available from the EP.