Open for Voting

Request: Build NCM's Compliance output to include an option to select devices in violation and download their configs

After building a Compliance check and remediation for Cisco NTP summer-time settings, I observed NCM 7.4 reviewing configs, testing for the Rule/Policy, recording violations and non-violations, and remediating the issue via the script I provided.

After the Compliance and remediation was complete I saw the list of devices that had failed the check--and that I assume and expect had been remediated by my script.

pastedImage_2.png

Problem: There's no way to confirm the problems are corrected until the next time NCM downloads their configs, AND the compliance report is updated and reviewed.  And to do that means waiting for the next scheduled NCM download, and then manually running the compliance report again at that time.

Solution:  NCM could provide the option to select some or all of these "Compliance-failed" nodes from the Compliance Report and then give the option perform an immediate configuration download on some or all of the devices.

Once that is complete it would be a simple matter of updating the Compliance Report to see which devices still need attention.

Can SW modify the NCM Compliance Report capabilities to allow us to select the devices from the Report and do an immediate download of their configs?