> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/hosts/compliance/automatic-system-hardening-audits.md).

# Automatic System Hardening: Audits

Audits for automatic system hardening help you track which controls from your checklists have already been fulfilled and which are still pending. This helps you to ensure that technical requirements and legal compliance requirements are met.

***

<i class="fa-compass">:compass:</i> Navigate to **Hosts** → **Compliance** → **Automatic System Hardening** → **Audits** to show a list of all controls from your [checklists for automatic system hardening](/docs/manual/english/platform-usage/hosts/compliance/automatic-system-hardening-checklists.md). If you have not created any checklists yet, this view is empty.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2Fj7044ICXBZTt3KGrPBca%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-audits.jpg?alt=media&amp;token=54eee9c8-c4fc-4c04-9f15-c3f8556d2608" alt=""><figcaption></figcaption></figure>

The [audit overview](#audits-overview) provides information such as:

* whether a control has already been fulfilled or is still pending.
* which severity and risk score a control has.
* which hosts the control applies to and which checklists it is assigned to.

You can also [apply controls](#apply-control) to roll them out manually.

***

## Navigation

<i class="fa-magnifying-glass">:magnifying-glass:</i> Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly.

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Refresh** icon <i class="fa-arrows-rotate-reverse">:arrows-rotate-reverse:</i> above the list to update all list items.

<i class="fa-computer-mouse-scrollwheel">:computer-mouse-scrollwheel:</i> Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages.&#x20;

### Filtering the List

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Filter** icon <i class="fa-filter">:filter:</i> above the list to filter the list by predefined parameters.

{% hint style="info" %}
The default filter is **Applicable = True**. This means that only controls that can actually be checked on the corresponding hosts are shown in the overview. Click the **Remove** icon <i class="fa-xmark">:xmark:</i> next to the applied filter to remove the filter and show all available controls.
{% endhint %}

<details>

<summary>Available Filters</summary>

<table><thead><tr><th width="206.60546875">Parameter</th><th width="116.515625">Type</th><th>Description</th></tr></thead><tbody><tr><td>Applicable</td><td>Boolean</td><td><p>Filter by whether a control can be fulfilled on an assigned host or not.<br><br>The following values are available:</p><ul><li><strong>True</strong>: The control can be fulfilled on the assigned host.</li><li><strong>False</strong>: The control cannot be fulfilled on the assigned host because the required conditions do not apply.</li></ul></td></tr><tr><td>Checklist</td><td>String</td><td>Filter by a specific checklist for automatic system hardening or exclude it from the results. All available checklists are shown.</td></tr><tr><td>Host</td><td>String</td><td>Filter by a specific host to which a control is assigned or exclude it from the results. All available hosts are shown.</td></tr><tr><td>Passed</td><td>Boolean</td><td><p>Filter by whether a control has already been fulfilled or not.<br><br>The following values are available:</p><ul><li><strong>True</strong>: The control has been fulfilled.</li><li><strong>False</strong>: The control is still pending.</li></ul></td></tr><tr><td>Severity</td><td>String</td><td>Filter by a specific severity assigned to a control or exclude it from the results. All available severity levels are shown.</td></tr><tr><td>Tag</td><td>String</td><td>Filter by a specific host tag assigned to a group of hosts or exclude it from the results. All available tags are shown.</td></tr></tbody></table>

</details>

### Sorting List Items&#x20;

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Sort** icon <i class="fa-sort">:sort:</i> next to a column name in the table header to sort by that column in ascending <i class="fa-angle-up">:angle-up:</i> or descending order <i class="fa-chevron-down">:chevron-down:</i> .

<i class="fa-computer-mouse">:computer-mouse:</i> Click the sort icon <i class="fa-bars-sort">:bars-sort:</i> above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority.

***

## Audits: Overview

The audit overview is structured as a table.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2Fqj6TTdfTZMQ9ypEEjatJ%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-audits%20overview.jpg?alt=media&amp;token=092244f7-8dce-42a1-aced-2e84b1654052" alt=""><figcaption></figcaption></figure>

The following information is shown:

<table><thead><tr><th width="200.09765625">Column</th><th>Description</th></tr></thead><tbody><tr><td>Severity</td><td><p>Shows the severity assigned to the respective control.<br></p><p>The following severity levels can be shown:</p><ul><li><strong>Critical:</strong> The control has a very high criticality.</li><li><strong>High</strong>: The control has a high criticality.</li><li><strong>Medium</strong>: The control has a medium criticality.</li><li><strong>Low</strong>: The control has a low criticality.</li><li><strong>OK</strong>: The control has passed. This means there is no longer any criticality.</li><li><strong>Revalidating</strong>: The control has a risk score of 0. A criticality has not yet been assigned.</li></ul></td></tr><tr><td>Name</td><td>Shows the name of the control and an additional description, if provided.<br><br>The host tags assigned to the control are also shown.</td></tr><tr><td>Host</td><td>Shows the name of the host to which the respective control is assigned.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the name of a host to navigate to the respective <a href="/docs/manual/english/platform-usage/host-detail-view.md">host detail view</a>.</td></tr><tr><td>Fulfilled</td><td><p>Shows whether the corresponding control has been fulfilled using a colored icon.</p><p></p><p>The following icons can be shown:</p><ul><li>Green <strong>check</strong> icon ( <i class="fa-circle-check" style="color:green;">:circle-check:</i> ): The control was fulfilled.</li><li>Red <strong>circle</strong> icon ( <i class="fa-circle" style="color:red;">:circle:</i> ): The control has not yet been fulfilled.</li><li>Gray <strong>question mark</strong> icon ( <i class="fa-circle-question" style="color:$info;">:circle-question:</i> ): The control cannot be fulfilled on the assigned host because the required conditions do not apply.</li></ul></td></tr><tr><td>Checklists</td><td>Shows the checklists to which the respective control is assigned.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click a checklist to navigate to the respective <a href="/docs/manual/english/platform-usage/hosts/compliance/automatic-system-hardening-checklists.md#checklist-edit-view">edit view</a>. Here you can adjust configured settings and delete the checklist.</td></tr><tr><td>Observed at</td><td>Shows the date and time when the fulfillment of the respective control was last checked or when the control passed.</td></tr><tr><td>Risk Score</td><td><p>Shows Enginsight's own risk score for the respective control.</p><div data-gb-custom-block data-tag="hint" data-style="success" data-icon="lightbulb" class="hint hint-success"><p>For more information on how the Enginsight-specific risk score is calculated, see our Knowledge Base: <a href="https://docs.enginsight.com/docs/knowledge-base/english/risk-scores/how-is-enginsights-own-risk-score-calculated">How is Enginsight's own risk score calculated?</a></p></div></td></tr></tbody></table>

***

## Applying a Control

You can manually apply controls for automatic system hardening to roll them out to the assigned hosts. This marks the respective control as fulfilled for the audit.

{% hint style="danger" %}
**Please note**: Applying a control always changes system settings on an assigned host. This might influence functionality on your hosts.
{% endhint %}

<i class="fa-computer-mouse">:computer-mouse:</i> Select the checkbox <i class="fa-square">:square:</i> next to a list item to select the corresponding item. Alternatively, select the checkbox in the table header to select all list items at once.

The number of selected list items now appears next to the search field.

The option <i class="fa-slider">:slider:</i> **Apply** also appears in the upper-right corner. Click it to open the **Affected Controls** window.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FH9p85gnbcw20Hyr2gbUG%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-audits-apply%20control.jpg?alt=media&amp;token=ac8040c8-9cbf-4e8d-ad64-004d3dfd0dfa" alt=""><figcaption></figcaption></figure>

<i class="fa-computer-mouse">:computer-mouse:</i> Select the checkbox <i class="fa-square">:square:</i> next to **Confirm System Changes** and click **Apply** to roll out the controls to the assigned hosts.

{% hint style="warning" %}
**Please note**: If a control on a Linux system still shows a severity other than **OK** **after applying** the hardening measure, the hardening measure could not be completed successfully.

This can be the case, for example, if the required configuration file exists and can be modified, but a service required for the change cannot be restarted by the Pulsar. Information about the cause can usually be found in the [Pulsar logs](https://docs.enginsight.com/docs/knowledge-base/english/logging/where-do-i-find-which-enginsight-logs#pulsar).

In this case, a manual review and, if necessary, adjustment by a system administrator is required.
{% endhint %}

***

## Further Resources

**Knowledge Base**

* [How is Enginsight's own risk score calculated?](https://docs.enginsight.com/docs/knowledge-base/english/risk-scores/how-is-enginsights-own-risk-score-calculated)
* [Where do I find which Enginsight logs?](https://docs.enginsight.com/docs/knowledge-base/english/logging/where-do-i-find-which-enginsight-logs)
* [How do I increase security for automatic system hardening on Windows hosts in Enginsight?](https://docs.enginsight.com/docs/knowledge-base/english/system-hardening/how-do-i-increase-security-for-automatic-system-hardening-on-windows-hosts-in-enginsight)
* [What predefined checks does Enginsight provide for automatic system hardening?](https://docs.enginsight.com/docs/knowledge-base/english/system-hardening/what-predefined-checks-does-enginsight-provide-for-automatic-system-hardening)

***
