FAQS

How to add new AWS Account to PacBot to Monitor ?

For adding a new account to PacBot, follow steps. After account added successfully, PacBot will start data collection from the respective account.

I see the compliance as 100% for all rules which probably won't be true. Is there anything missing?

You probably missing an index. As a short-term fix please create the below index.

PUT "exceptions": {
  "mappings": {
    "sticky_exceptions": {
      "properties": {
        "assetGroup": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "dataSource": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "exceptionName": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "exceptionReason": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "expiryDate": {
          "type": "date"
        },
        "targetTypes": {
          "properties": {
            "name": {
              "type": "text",
              "fields": {
                "keyword": {
                  "type": "keyword",
                  "ignore_above": 256
                }
              }
            },
            "rules": {
              "properties": {
                "ruleId": {
                  "type": "text",
                  "fields": {
                    "keyword": {
                      "type": "keyword",
                      "ignore_above": 256
                    }
                  }
                },
                "ruleName": {
                  "type": "text",
                  "fields": {
                    "keyword": {
                      "type": "keyword",
                      "ignore_above": 256
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}