On 8/7/19 2:58 PM, Greg Silverman wrote:
Is there any way within oscap to record the time taken for each rule’s evaluation to complete? We sometimes see it taking over an hour to complete on RHEL7 and want to understand why.


Could try verbose mode. Not sure if timestamps are generated. Something like:

$ oscap xccdf eval --profile ${profile} --results ~/scan-results.xml *--verbose devel */path/to/your/content.xml


Worst case you could create a for loop iterating through all the rules in your profile. Would have to grep out all the rules in your profile, but the SCAP command would be something like:

$ time oscap xccdf eval --profile ${profile} --rule ${rule} /path/to/your/content.xml


_______________________________________________
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Reply via email to