On 8/7/19 2:58 PM, Greg Silverman wrote:
Is there any way within oscap to record the time taken for each rule’s evaluation to complete? We sometimes see it taking over an hour to complete on RHEL7 and want to understand why.

Could try verbose mode. Not sure if timestamps are generated. Something like:

$ oscap xccdf eval --profile ${profile} --results ~/scan-results.xml *--verbose devel */path/to/your/content.xml

Worst case you could create a for loop iterating through all the rules in your profile. Would have to grep out all the rules in your profile, but the SCAP command would be something like:

$ time oscap xccdf eval --profile ${profile} --rule ${rule} /path/to/your/content.xml

Open-scap-list mailing list

Reply via email to