View Configuration Compliance test results

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 3 min. de leitura

    • View Configuration Compliance test results for auditing and remediation. The test results are automatically created during third-party vulnerability integration imports.

    Importante:
    You can view the test results created during the third-party vulnerability integration imports in the Vulnerability Manager Workspace. For more information, see List page in the Vulnerability Manager Workspace.

    Antes de Iniciar

    Role required:
    • sn_vulc.read to view
    • sn_vulc.remediation_owner to view and update
    • sn_vulc.delete to delete

    Por Que e Quando Desempenhar Esta Tarefa

    Configuration Compliance does not create or update the test results, but imports them as part of a third-party integration. Once they are viewable in Configuration Compliance, they are remediated using Test Result Groups.

    Nota:
    Starting with v14.9 of Configuration Compliance, the following terms have been renamed:
    Tabela 1. Changes in terminology
    Terminology prior to v14.9 Terminology v14.9 onwards
    Test Result Group Remediation Task
    Group Rules Remediation Task Rules
    Policy Test group

    Procedimento

    1. Navigate to All > Configuration Compliance > Test Results.
      Starting with v15.0 of Configuration Compliance, the following columns appear in the Test Results list.
      Tabela 2. Test Results list
      Column Description
      Active Indicates if a test result is active. A test result is marked:
      • True: If the State isn’t Closed.
      • False: If the State is Closed.
      Age Time period for which a test result is active since it was last open.

      This field is empty for a closed test result.

      Format: Days HH:MM: SS

      For more information on how to customize the Age calculation, see the KB1703270 article.
      Age closed Time period for which a test result was active before it transitioned to ‘Closed'. When the test result transitions to ‘Closed', the value from the Age column is displayed in the Aged closed field.

      This field is empty for an active test result.

      Format: Days HH:MM: SS

      For more information on how to customize the Age closed calculation, see the KB1703270 article.
      Closed Timestamp at which a test result is closed.

      Format: YYYY-MM-DD HH:MM: SS
      Last opened Timestamp at which a test result is opened, that is, when the Active field value changes to true.
    2. Open the control that you want to view.
      Tabela 3. Configuration Compliance test result form fields
      Field Description
      Number The number assigned to the test during the import process.
      Source The system name of the third-party SCA application, or the name entered in the application plugin for the API that is used to communicate with Configuration Compliance.
      Source ID The identifier assigned to the control by the SCA application.
      Result Passed, Failed, Error, or Unknown. Imported from Qualys.
      Risk score Calculator result for this test.

      Prior to v15.0 of Configuration Compliance, the risk score of a passed test result is set to '0'. Starting with v15.0 of Configuration Compliance, the risk score of the passed test result isn’t changed to '0' so that you can estimate the risk mitigated. The risk score of the passed test result isn’t included in calculating the risk score of a remediation task.
      Risk rating Based on a range of risk scores on a 1-5 numeric scale that rates overall risk based on a range of risk scores as 1 - Critical to 5 - None. This field replaces the Priority field in previous versions.
      State Calculated from the remediation tasks that the test result belongs to. If the test result belongs to multiple groups, an order of precedence is applied to determine state.
      Resolution Calculated from the remediation tasks that the test result belongs to. If the test result belongs to multiple groups, an order of precedence is applied to determine resolution.
      First seen Date first imported into Configuration Compliance.

      Starting with v13.1.1, the First seen field displays the date provided by the scanner. Otherwise, it displays the date first imported into Configuration Compliance.
      Last seen Date last imported into Configuration Compliance.

      Starting with v13.1.1, the Last seen field displays the date provided by the scanner. Otherwise, it displays the date last imported into Configuration Compliance.
      Last pass Latest date on which the test result is passed.
      Test Name of the test.
      Configuration item Name of the CI attached to the test.
      Technology Software version running on the CI.
      Description Description of the test
      Expected Values Expected values configured in Qualys and imported by Configuration Compliance. This value is a Boolean expression that when evaluated to true makes the test result Passed. The expression can be a combination of logical, set, or regular expression operators.
      Actual Values Values returned by the test. These values are plugged into the expected values Boolean expression to determine if the result should pass or fail. They’re imported from Qualys.

      Starting with version 14.9 of Configuration Compliance, the Extended Evidence and Cause of Failure values are added in the Actual Values column.
      Remediation Remediation instructions.
      Related Tabs
      Remediation Tasks Remediation tasks associated with this test result.
      Test Result History Related list of test results that show the history of pass/fail results for the same CI/technology/test.