FAQS

How to add new AWS Account to PacBot to Monitor ?

For adding a new account to PacBot, follow steps. After account added successfully, PacBot will start data collection from the respective account.

I see the compliance as 100% for all rules which probably won't be true. Is there anything missing?

You probably missing an index. As a short-term fix please create the below index.

PUT exceptions {

"mappings": {
  "sticky_exceptions": {
    "properties": {
      "assetGroup": {
        "type": "text",
        "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 256
          }
        }
      },
      "dataSource": {
        "type": "text",
        "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 256
          }
        }
      },
      "exceptionName": {
        "type": "text",
        "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 256
          }
        }
      },
      "exceptionReason": {
        "type": "text",
        "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 256
          }
        }
      },
      "expiryDate": {
        "type": "date"
      },
      "targetTypes": {
        "properties": {
          "name": {
            "type": "text",
            "fields": {
              "keyword": {
                "type": "keyword",
                "ignore_above": 256
              }
            }
          },
          "rules": {
            "properties": {
              "ruleId": {
                "type": "text",
                "fields": {
                  "keyword": {
                    "type": "keyword",
                    "ignore_above": 256
                  }
                }
              },
              "ruleName": {
                "type": "text",
                "fields": {
                  "keyword": {
                    "type": "keyword",
                    "ignore_above": 256
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}

}