On 8/7/19 2:58 PM, Greg Silverman wrote:
Is there any way within oscap to record the time taken for each rule’s evaluation to complete? We sometimes see it taking over an hour to complete on RHEL7 and want to understand why.
Could try verbose mode. Not sure if timestamps are generated. Something like:
$ oscap xccdf eval --profile ${profile} --results ~/scan-results.xml *--verbose devel */path/to/your/content.xml
Worst case you could create a for loop iterating through all the rules in your profile. Would have to grep out all the rules in your profile, but the SCAP command would be something like:
$ time oscap xccdf eval --profile ${profile} --rule ${rule} /path/to/your/content.xml
_______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
