Skip to content

View Findings

The Findings page displays all evaluation results across your organization. Use it to monitor compliance status, identify failing checks, and prioritize remediation efforts.

Accessing the Findings Page

Navigate to Findings in the left menu. The page loads all findings with their current status.

Statistics Cards

At the top of the page, four clickable statistic cards summarize the current state:

CardDescription
Passed (green)Total number of findings with a Pass result
Failed (red)Total number of findings with a Fail result
Error (orange)Total number of findings with an Error result
Total (gray)Total number of findings across all statuses

Click any card to filter the findings list to that result type. Click the Total card or the clear button to remove the filter.

Findings Table

The main table displays each finding with the following columns:

ColumnSortableDescription
AssetYesThe asset name. Click to navigate to the asset detail page.
PolicyYesThe policy that contains this ruleset. Click to navigate to the policy detail page.
RuleYesThe ruleset that produced this finding. Click to navigate to the ruleset detail page.
EvalsYesThe total number of evaluations for this finding, shown as a badge
StatusYesThe current result: Pass (green), Fail (red), or Error (orange)
ActorYesWho performed the last evaluation: System or User
Last EvaluatedYesWhen the most recent evaluation occurred
ActionsNoView button to open the finding detail page

Use the search bar to filter findings by:

  • Asset name: Find findings for a specific server or resource
  • Rule title: Search for a specific security check
  • Policy name: Find all findings from a particular policy

The search operates across the asset name, rule title, and policy name fields simultaneously.

Filter by Result

To filter findings by evaluation result:

  1. Click one of the statistic cards (Passed, Failed, Error) at the top of the page
  2. The table updates to show only findings with that result
  3. A filter badge appears showing the active filter
  4. Click the X button next to the filter badge to clear it, or click the Total card

TIP

Start by clicking the Failed card to focus on non-compliant findings. Sort by Last Evaluated to see the most recent failures first.

Sort

Click any sortable column header to sort the table:

  • Click once to sort ascending
  • Click again to sort descending
  • The default sort is Last Evaluated descending (newest first)

Pagination

The findings list is paginated with 20 items per page by default. Use the pagination controls at the bottom to:

  • Navigate between pages
  • Change the number of items per page

Common Workflows

Identify All Failing Checks for an Asset

  1. Use the search bar to enter the asset name
  2. Click the Failed statistic card to filter by failures
  3. Review each failing finding and its associated ruleset

Review All Findings for a Policy

  1. Use the search bar to enter the policy name
  2. View all findings across all assets for that policy
  3. Sort by Status to group pass/fail results together

Investigate Recent Failures

  1. Sort by Last Evaluated descending (default)
  2. Click the Failed card
  3. Review the most recently failed checks
  4. Click the view button to see evaluation details and history

Find Manual Overrides

  1. Sort by Actor column
  2. Look for findings with User as the actor
  3. These represent manually overridden results

AttackLens - Continuous Exposure Management