Chapter 3. Creating a remediation plan in Insights

Procedure

1. Choose an Insights advisor service recommendation to remediate:

   1. Navigate to Operations > Advisor > Recommendations.
   2. Review the Recommendations table to see which recommendations are applicable for your systems and whether they have a playbook already created.

   3. Use the search and filtering function in the table to sort the items by Resolution type.

      Important

      Look for recommendations that have a Resolution type of Playbook. You cannot create a remediation plan if the Resolution type is set to Manual.

   4. Click the recommendation name. The full details of the recommendation are displayed, and a list of impacted systems is displayed on the lower part of the page.

2. Select which systems to include in the remediation plan:

   1. Scroll to view all of the registered RHEL systems that are impacted by the recommendation.

   2. Find the systems to include. If needed, use the search and filter functions in the table. For example, you can use the filtering options to list the affected systems by version.

      Important

      To create a remediation plan for a group of systems, all systems in the group must be running the same RHEL major and minor versions to ensure that the resolution applied by the Red Hat Insights-generated playbook is compatible.

   3. Select at least one system to include in a remediation plan by clicking the checkbox to the left of the system ID.

3. Create and save the plan:

   1. Click Plan remediation to start the wizard.

   2. Select Create new playbook, and enter a name for the playbook.

      Note

      You can also add this recommendation or the selected systems to an existing remediation plan by choosing Add to existing playbook, and then selecting the plan name from the list presented.

   3. Under Review systems, review the systems included in the plan, and if applicable, clear the checkbox next to any systems that you do not want to include.
   4. Click Next.

   5. Under Review and edit actions, review the resolution steps for the action. Some actions will present different steps that you can choose from in the wizard. Complete one of the following steps:

      • If the action has a choice of methods to remediate:

        • Select Review and/or change the resolution steps for this 1 action, and click Next.
        • Choose one of the step choices, and click Next.
      • If there are no choices to be made and you are satisfied with the actions for this plan, select Accept all recommended resolution steps for all actions, and then click Next.

4. On the Remediation review pane, review the summary of your remediation plan and use the back button to make changes if needed.

   Note

   If a reboot is required to fix the issue or risk, all systems in the remediation plan will be automatically rebooted. If you prefer to reboot manually after the plan has been executed, toggle the Auto-reboot button accordingly.

5. Click Submit.

Verification steps

1. Navigate to Automation Toolkit > Remediation Plans.
2. Search for your remediation plan in the table. Click the remediation plan to open the plan.

Procedure

1. Navigate to the Security > Vulnerability > CVEs page.
2. Set the filters as needed and select a CVE.
3. Scroll down to view all of the affected systems. Use the filtering options to list the affected systems by version.

4. Select systems to include in a remediation plan by clicking the box to the left of the system ID.

   Important

   To create a remediation plan for a group of systems, all systems in the group must be running the same RHEL major and minor versions to ensure that the resolution applied by the Red Hat Insights-generated playbook is compatible.

5. Click Plan remediation.

6. Choose whether to add the remediations to an existing or new remediation plan, and then do one of the following actions, and then click Next:

   • Click Add to existing playbook, and then select a remediation plan from the list presented.
   • Click Create new playbook, and enter a name for the playbook.

7. Review the systems to include in the remediation plan, then click Next.

   Note

   Only affected systems can be selected and included in a remediation plan.

8. Review the information under the remediation review summary.

   1. If a reboot is required to fix the issue or risk, all systems in the remediation plan will be automatically rebooted. If you prefer to reboot manually after the plan has been executed, toggle the Auto-reboot button accordingly.
   2. Click Submit.

Verification steps

1. Navigate to Automation Toolkit > Remediation Plans.
2. Search for your remediation plan. You should see the plan that you just created showing in the list.