Use a remediation script to apply a change only to a config block in violation to a compliance rule?

Question

I'm trying to find a what to replace a command on interfaces that violate a compliance rule. The rule is looking at the interfaces config block. That portion works fine (located the code that I want to change). But how can I build the script to run the remediation script on each and only of the config blocks in violation?

Specifically, I have many interface through our many switch with "authentication host-mode multi-domain". I want to change just those interface with that command to "authentication host-mode multi-auth".

It there a way I can "feed" the violated interfaces from the config blocks into a remediation script to add the correct command to each interface?

cnorborg · Answer

Check this out…

https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-orion-variables-and-examples-sw1115.htm

The ${ConfigBlockStartLine} is very specific to these config blocks and I don't believe there are any others like it.  But, you might be able to use some of these other variables in what you're doing.  Sometimes they only work based on where you're using them.

Could have sworn this variable used to be on the rules definition page when configuring a config block, but not seeing it there.   They should put it back there so we don't have to remember it!!

david.b.davis · Answer

I was making it much harder that needed. Thanks AI, lol You don't happen to have a list of the valid variables?

PJC · Answer

Yes, this is a good fit for NCM Compliance rather than targeting interface names manually. Create a config-block rule with interface * as the start and ^! as the end, then match only blocks containing authentication host-mode multi-domain. In the remediation, keep ${ConfigBlockStartLine}, remove the old command if required by the switch, and add authentication host-mode multi-auth. Run the report first, test the remediation on one switch, and then apply it to the remaining confirmed matches.

This may help with the setup: NCM Compliance Remediation