When you import scan results or another checklist, STIG Viewer 3.x compares each incoming result with the rules in your checklist. It matches on the Rule ID and on the revision number. This article explains the import summary and when to use loose matching.
How matching works
A Rule ID looks like SV-222437r987626_rule. The part before the "r" identifies the rule. The number after the "r" is the revision. The revision can change from one STIG release to the next.
The import summary shows three groups:
- Exact matches. The Rule ID and the revision both match. These import by default.
- Loose matches. The Rule ID matches but the revision does not. These are skipped unless you check Include loosely matched results.
- No match. No rule in the checklist has that Rule ID. Click Show to list them.
Steps
- Open the checklist.
- Click Import. Select Import XCCDF or CMRS Results for scan output, or Import Checklist Data for another checklist.
- Select the file and click Load.
- Read the summary counts.
- To import only exact matches, click Complete Import.
- To import loose matches too, check Include loosely matched results, then click Complete Import.
When to use loose matching
Loose matching helps when you move results to a newer STIG release. Most rules keep the same intent between releases. Still, a changed revision can mean the check or fix text changed. After the import, review each loosely matched rule against the new check text.
Importing checklist data
Import Checklist Data brings in Status, Comments, Finding Details and Target Data. If incoming rules have Comments or Finding Details, you choose Replace existing, Append to existing or Ignore incoming. You can also choose to include or exclude the incoming target data.