Red Hat Summit Red Hat Summitサポートコンソール開発者トライアルの開始お問い合わせ

このコンテンツは選択した言語では利用できません。

Chapter 2. Getting started using the compliance service

This section describes how to configure your RHEL systems to report compliance data to the Red Hat Lightspeed application. This installs necessary additional components such as the SCAP Security Guide (SSG), which is used to perform the compliance scan.

Prerequisites

  • The Red Hat Lightspeed client is deployed on the system.
  • You must have root privileges on the system.

Procedure

  1. Check the version of RHEL on the system: 

    [user@rhlightspeed]$ cat /etc/redhat-release
    Copy to Clipboard Toggle word wrap

  2. Review the Red Hat Lightspeed Compliance - Supported configurations article and make note of the supported SSG version for the RHEL minor version on the system.

    Note

    Some minor versions of RHEL support more than one version of SSG. The Red Hat Lightspeed compliance service will always show results for the latest supported version.

  3. Check if the supported version of the SSG package is installed on the system:

    Example - for RHEL 8.4 run: 

    [root@rhlightspeed# dnf info scap-security-guide-0.1.57-3.el8_4
    Copy to Clipboard Toggle word wrap

  4. If it is not already installed, install the supported version of SSG on the system.

    Example - for RHEL 8.4 run: 

    [root@rhlightspeed]# dnf install scap-security-guide-0.1.57-3.el8_4
    Copy to Clipboard Toggle word wrap

  5. Assign systems to policies using the Red Hat Lightspeed compliance service UI, or using insights-client commands in the CLI:

  6. After adding each system to the needed security policy, return to the system and run the compliance scan using: 

    [root@rhlightspeed]# insights-client --compliance
    Copy to Clipboard Toggle word wrap
    Note

    The scan can take 1-5 minutes to complete.

  7. Navigate to Security > Compliance > Reports to view results.
  8. Optional: Schedule the compliance jobs to run with cron.

2.1. Setting up recurring scans for Red Hat Lightspeed services
リンクのコピー

To get the most accurate recommendations from Red Hat Lightspeed services such as compliance and malware detection, you might need to manually scan and upload data collection reports to the services on a regular schedule.

Use the following insights-client commands to run the commands manually: 

# insights-client --compliance
# insights-client --collector malware-detection
Copy to Clipboard Toggle word wrap

Currently, Red Hat Lightspeed does not have an automated scheduler to perform the scans for you, but you can configure a cron job to schedule automatic scans.

Important

Before you create a cron job, make sure that the commands work properly when you run them manually.

Prerequisites

  • The services you want to use (Compliance and Malware Detection) are configured and running on your system.

Procedure

  1. At the system prompt, issue the crontab -e command to edit the crontab file. This command opens your default text editor. 

    $ crontab -e
    Copy to Clipboard Toggle word wrap

  2. Add a crontab entry for the service you want to run. For example: 

    10 20 * * * /bin/insights-client --compliance
10 21 * * * /bin/insights-client --collector malware-detection
    Copy to Clipboard Toggle word wrap

    In this example, the first command uploads a Compliance report to Red Hat Lightspeed every day at 20:10 local time. The second command uploads a malware detection report to Red Hat Lightspeed every day at 21:10 local time.

  3. Save the file and exit the text editor.
トップに戻る
Red Hat logoGithubredditYoutubeTwitter

詳細情報

試用、購入および販売

コミュニティー

Red Hat ドキュメントについて

Red Hat をお使いのお客様が、信頼できるコンテンツが含まれている製品やサービスを活用することで、イノベーションを行い、目標を達成できるようにします。 最新の更新を見る.

多様性を受け入れるオープンソースの強化

Red Hat では、コード、ドキュメント、Web プロパティーにおける配慮に欠ける用語の置き換えに取り組んでいます。このような変更は、段階的に実施される予定です。詳細情報: Red Hat ブログ.

会社概要

Red Hat は、企業がコアとなるデータセンターからネットワークエッジに至るまで、各種プラットフォームや環境全体で作業を簡素化できるように、強化されたソリューションを提供しています。

Theme

© 2025 Red Hat