Logging errors

[leeclay95]

Are there ways within stigmanager to track hosts that fail to import results?

What roles are recommended to give auditors to only view STIG results?

Is keycloak the only support OIDC for the base image of STIGManager?

[cd-rite]

Hello @leeclay95

1. I'm not quite sure what you mean by this question. The container logs will indicate failed requests. Otherwise, in the app, the import wizard presents a report of what files imported, assets created, stigs assigned, reviews updated, etc. The dashboard also shows Asset stats indicating their oldest/newest reviews, which could be used to infer that imports are not working.

2. You can give Auditors "Full" Access with a read-only grant. https://stig-manager.readthedocs.io/en/latest/user-guide/roles-and-access.html

3. Nope, we have fairly generic OIDC requirements. There are deployments with Azure Entra, Okta, F5 etc. for OIDC Providers.