In the General tab, what are your Allowed Operations? Did you add that directory as a Part?
you can't remediate to a snapshot directly - you have a couple options:
- w/ the snapshot (assuming you choose 'file contents) you can create a blpackage. the blpackage can be linked to the rule remediation.
- use an audit job instead and you can do 'sync to master' (though not automated unless you use the blcli)
First YES - I added the directory as a Part
Second - I already create a blpackage that linked as remediation, and I can run that manually.
But we don't want to run manually the 'sync to master' option, we want that to be automatically in any case the file or the directory been change (with the contents)
Can we do that?
compliance is not really optimized for 'change tracking' which is what you are doing here. i think you should write some nsh scripts that make blcli calls to run the audit, and if there is a change then run the 'sync to master'.