Creating a Policy Rule

Create a patch compliance policy rule for a custom product in Fleet Application Management.

• Console
• CLI
• API

• 1. On the Patch compliance policies list page, select the compliance policy that you want to work with. If you need help finding the list page or the compliance policy, see Listing Compliance Policies.
  2. In the details page of the compliance policy, select Create policy rule.
  3. In the Create policy rule panel, enter name for the rule. Avoid entering confidential information.
  4. For the Product version, select a specific product version or a specific version and successive versions, for example, 12.1 or 12.1 and above for Oracle WebLogic Server. The policy applies only to the version or next versions, and not to other versions such as, 12.1.x.
  5. For Patch type and Severity, select one or many patch types and severities to which this policy applies.
  6. For Patch selection, select one of the following options:
     • Patch level: If you select the Patch level as Latest, Fleet Application Management calculates the compliance status of the product in the following ways:
       • Reports the patch process as compliant for the software identified or targets discovered at the Latest and Latest-1 versions.
       • Reports the patch process as noncompliant for the software identified or targets discovered at the Latest-2 version.
     • Patch name: Select a specific patch.
     • Release date: If you select this option and enter the number of days since release, Fleet Application Management calculates the number of days that have passed after the release date and reports the product as noncompliant if the days exceed the number provided in Days since release. By default, the number of days is 30 days.
  7. (Optional) Switch on the Enable grace period toggle to enable a grace period during which Fleet Application Management doesn't report the product as noncompliant while applying the patch.
  8. If you switched on the Enable grace period toggle, for Grace period time limit (days), enter the grace period in days. The minimum period that you can set is 30 days.
  9. Select Create.

  The policy rule is created and is listed under Policy rules on the compliance policy details page.

• Use the oci fleet-apps-management fleet-apps-management-admin compliance-policy-rule create command and required parameters to create a compliance policy rule:

  oci fleet-apps-management fleet-apps-management-admin compliance-policy-rule create --compliance-policy-id <compliance_policy_OCID> --display-name <text> --patch-selection <json_file_or_string> --patch-type-id <patch_type_OCID> --product-version <json_file_or_string> [OPTIONS]

  For a complete list of flags and variable options for Fleet Application Management CLI commands, see the CLI for Fleet Application Management.

• Run the CreateCompliancePolicyRule operation to create a compliance policy rule.