selang Reference Guide › selang Commands › selang Commands Reference › get devcalc Command—Retrieve Policy Deviation Data

get devcalc Command—Retrieve Policy Deviation Data

Valid in the AC environment

The get devcalc command retrieves information from the policy deviation data file (deviation.dat) that contains policy deviation calculation results and sends it to one or more set DMS databases. For the data file to exist, the start devcalc command must have been issued before.

When you create a policy or host report, you can also specify to include deviation calculation results. The reporting utility then issues this command.

Important! The deviation calculation does not check whether native rules are applied. It also ignores rules that remove objects (user or object attributes, user or resource authorization, or actual users or resources) from the database. For example, the calculation cannot verify whether the following rule is applied:
rr SUDO admCommand

Note: For more information about the policy deviation data file and advanced policy reporting, see the Enterprise Administration Guide.

To run the get devcalc command you must have terminal access rights to the computer and read access to DEVCALC sub-administration class.

This command has the following format:

get devcalc [params("offset=number")]

offset=number

(Optional) Defines the offset for retrieving more lines from the policy deviation data file. The get devcalc command can only return a maximum number of lines (set by the max_lines_request configuration setting) from the policy deviation data file per request. If there is more information in the file, the command returns offset data that specifies the last line returned.

Example: Get policy deviation data

The following example shows how the get devcalc command is used to retrieve information from the policy deviation data file when the max_lines_request setting is set to 10. The first command retrieves the first ten lines and the second command then retrieves the following ten lines of the output:

AC> get devcalc
(localhost)
Data for DEVCALC 'deviation'
----------------------------------------------
DATA	: DATE, Mon Mar 20 11:22:15 2006
POLICYSTART, myPolicy#01
DIFF, (FILE), (file1), (*), (*)
DIFF, (FILE), (file2), (*), (*)
DIFF, (FILE), (file3), (*), (*)
DIFF, (FILE), (file4), (*), (*)
DIFF, (FILE), (file5), (*), (*)
DIFF, (FILE), (file6), (*), (*)
DIFF, (FILE), (file7), (*), (*)
OFFSET	: 11

AC> get devcalc params("offset=11")
(localhost)
Data for DEVCALC 'deviation'
----------------------------------------------
DATA	: DIFF, (FILE), (file8), (*), (*)
DIFF, (FILE), (file9), (*), (*)
DIFF, (FILE), (file10), (*), (*)
DIFF, (FILE), (file11), (*), (*)
DIFF, (FILE), (file12), (*), (*)
DIFF, (FILE), (file13), (*), (*)
DIFF, (FILE), (file14), (*), (*)
DIFF, (FILE), (file15), (*), (*)
DIFF, (FILE), (file16), (*), (*)
DIFF, (FILE), (file17), (*), (*)
OFFSET	: 21

More information:

start devcalc Command—Initiate Policy Deviation Calculation