4.3.2 Creating Policies

This section explains the definition of policy information. Decide the following information and define targets and rules.

Policy name

Specify the policy name.

Item	Description
Name	The policy name. Specify a character string of up to 85 characters. Names cannot be omitted.

Target

Specify the configuration information to which the policy will apply. Specify the following information:

Item	Description
Views	View to which the policy is to be applied.
Target type	Type of the data to which the policy will apply. Select one of the following: CI Count Configures a threshold for the number of CIs displayed at a hierarchy level. Use this to detect whether the number of installed software exceeds the number of available licenses. Attribute Value Configures a threshold for the value of the attribute displayed in the table. Use this to detect if a software version older than the specified version has been installed.
Target data	Data to which the policy will apply. The specification method differs depending on the target type. CI Count Specify the hierarchy level to which the policy will apply. Attribute Value Specify the column to which the policy will apply.

Item

Description

Views

View to which the policy is to be applied.

Target type

Type of the data to which the policy will apply. Select one of the following:

CI Count
Configures a threshold for the number of CIs displayed at a hierarchy level. Use this to detect whether the number of installed software exceeds the number of available licenses.
Attribute Value
Configures a threshold for the value of the attribute displayed in the table. Use this to detect if a software version older than the specified version has been installed.

Target data

Data to which the policy will apply. The specification method differs depending on the target type.

CI Count
Specify the hierarchy level to which the policy will apply.
Attribute Value
Specify the column to which the policy will apply.

Rules

This section explains the definition of rules. Specify a rule that determines whether the configuration information is appropriate. Specify the following information for each target type.

CI Count

Specify the number of CIs. Specify the following information:

Item	Description
Comparison method	Specify the scope within which the number of target CIs is determined as appropriate. When the number of target CIs is within the scope specified by the comparison method and threshold value, the configuration is determined to be in compliance with the policy. When outside of the above scope, the configuration is determined to be in violation of the policy. For the comparison method, select one of the following: Perfect match When the number of target CIs is equal to the threshold value, the configuration is determined to be in compliance with the policy. Perfect mismatch When the number of target CIs differs from the threshold value, the configuration is determined to be in compliance with the policy. Smaller than When the number of target CIs is smaller than the threshold value, the configuration is determined to be in compliance with the policy. Bigger than When the number of target CIs is larger than the threshold value, the configuration is determined to be in compliance with the policy. Equal to or less than When the number of target CIs is equal to or smaller than the threshold value, the configuration is determined to be in compliance with the policy. Equal to or greater than When the number of target CIs is equal to or larger than the threshold value, the configuration is determined to be in compliance with the policy.
Threshold

Item

Description

Comparison method

Specify the scope within which the number of target CIs is determined as appropriate.

When the number of target CIs is within the scope specified by the comparison method and threshold value, the configuration is determined to be in compliance with the policy. When outside of the above scope, the configuration is determined to be in violation of the policy.

For the comparison method, select one of the following:

Perfect match
When the number of target CIs is equal to the threshold value, the configuration is determined to be in compliance with the policy.
Perfect mismatch
When the number of target CIs differs from the threshold value, the configuration is determined to be in compliance with the policy.
Smaller than
When the number of target CIs is smaller than the threshold value, the configuration is determined to be in compliance with the policy.
Bigger than
When the number of target CIs is larger than the threshold value, the configuration is determined to be in compliance with the policy.
Equal to or less than
When the number of target CIs is equal to or smaller than the threshold value, the configuration is determined to be in compliance with the policy.
Equal to or greater than
When the number of target CIs is equal to or larger than the threshold value, the configuration is determined to be in compliance with the policy.

Threshold

Attribute Value

Specify attribute values. Specify the following information:

Item	Description
Comparison method	Specify the scope within which the target attribute value is determined to be appropriate. When the target attribute value is within the scope specified by the comparison method and threshold value, the configuration is determined to be in compliance with the policy. When outside of the above scope, the configuration is determined to be in violation of the policy. For the comparison method, select one of the following: Perfect match When the target attribute value is equal to the threshold value, the configuration is determined to be in compliance with the policy. Perfect mismatch When the target attribute value differs from the threshold value, the configuration is determined to be in compliance with the policy. Partial match When the threshold value is included in the target attribute value, the configuration is determined to be in compliance with the policy. Partial mismatch When the threshold value is not included in the target attribute value, the configuration is determined to be in compliance with the policy. Smaller than When the number of target CIs is smaller than the threshold value, the configuration is determined to be in compliance with the policy. Bigger than When the number of target CIs is larger than the threshold value, the configuration is determined to be in compliance with the policy. Equal to or less than When the number of target CIs is equal to or smaller than the threshold value, the configuration is determined to be in compliance with the policy. Equal to or greater than When the number of target CIs is equal to or larger than the threshold value, the configuration is determined to be in compliance with the policy. Regular expression Specify a regular expression pattern as the threshold value. When the target attribute value matches the regular expression patterns, the configuration is determined to be in compliance with the policy.
Threshold

Item

Description

Comparison method

Specify the scope within which the target attribute value is determined to be appropriate.

When the target attribute value is within the scope specified by the comparison method and threshold value, the configuration is determined to be in compliance with the policy. When outside of the above scope, the configuration is determined to be in violation of the policy.

For the comparison method, select one of the following:

Perfect match
When the target attribute value is equal to the threshold value, the configuration is determined to be in compliance with the policy.
Perfect mismatch
When the target attribute value differs from the threshold value, the configuration is determined to be in compliance with the policy.
Partial match
When the threshold value is included in the target attribute value, the configuration is determined to be in compliance with the policy.
Partial mismatch
When the threshold value is not included in the target attribute value, the configuration is determined to be in compliance with the policy.
Smaller than
When the number of target CIs is smaller than the threshold value, the configuration is determined to be in compliance with the policy.
Bigger than
When the number of target CIs is larger than the threshold value, the configuration is determined to be in compliance with the policy.
Equal to or less than
When the number of target CIs is equal to or smaller than the threshold value, the configuration is determined to be in compliance with the policy.
Equal to or greater than
When the number of target CIs is equal to or larger than the threshold value, the configuration is determined to be in compliance with the policy.
Regular expression
Specify a regular expression pattern as the threshold value. When the target attribute value matches the regular expression patterns, the configuration is determined to be in compliance with the policy.

Threshold

Note

Numerical comparison between attribute values and threshold values

When Smaller than, Bigger than, Equal to or less than, or Equal to or greater than is specified as the comparison method, the attribute value and threshold value are compared as follows.

When both the attribute value and the threshold value are numeric values, numerical comparison is performed. Numerical comparison ignores commas (",") in numeral values. Numeric values within the following ranges are acceptable:
- Positive values between 4.94065645841246544E-324 and 1.79769313486231570E+308 (*)
- Negative values between -1.79769313486231570E+308 and -4.94065645841246544E-324 (*)
  *Note: "E" indicates an exponent.
When either or both of the attribute value and the threshold value are not numeral values, comparison is performed according to character code points. Unicode code points are compared starting with the leftmost character of the character string.

When no attribute values exist

When no attribute values exist, comparison is performed assuming that the attribute value is an empty string (character count is zero).

Enabled/Disabled

This section explains enabling or disabling policies.

Item	Description
Enabled	Enables the policy. Policy verification is performed on the configuration information.
Disabled	Disables the policy. Policy verification is performed on the configuration information. Use this option to stop a policy temporarily for cases such as when editing views.