Compliance (hosts)
The Compliance page lists every host the LEA Platform server knows about, with its current pass/fail status. (The console calls hosts "clients".) For signed audit evidence, see Compliance evidence & reports.
Summary cards
- Total Clients: all registered hosts.
- Verified: hosts passing all their rules.
- Active: hosts that are currently checking in.
- Compliance Rate: verified hosts as a share of all hosts.
Hosts table
| Column | Description |
|---|---|
| Client name | The host's name |
| Status | Verified, Unverified or N/A |
| Severity | Worst severity among the host's failing rules |
| Enrollment | Enrollment state (see Agent enrollment) |
| Distribution | OS / distribution (Ubuntu, Rocky, Alpine, Oracle Linux, macOS, Windows, ...) |
| Version | Distribution version |
| IP address | Primary IP |
| Last seen | Last agent check-in |
Columns can be shown, hidden and resized. Expand a row for quick details: system type, kernel, architecture, internal and public IP, registration time, last seen, agent version.
Filters: text search, status (All, Verified, Unverified, N/A, Active, Inactive), severity, enrollment state, group, and metadata filters (see Search & filters). Bulk actions work on selected hosts or on all hosts matching the filters. Export the list as CSV or JSON.
Client overview
Click a host to open its overview. Tabs:
| Tab | What it shows |
|---|---|
| Details | Name, status, registration and last-seen times, OS, kernel, architecture, IPs, agent version, enrollment and certificate state, and the rules applied with their latest results |
| Executions | Every rule result for this host: rule, time, return code, pass/fail |
| Execution Log | Chronological log of all commands run on the host |
| Agent Logs | Logs sent by the agent, for diagnosing connectivity or permission problems |
| Live Debug | Verbose debug output from the agent while enabled |
| Live Execution | Run an ad-hoc command on the host |
| Groups | Every group the host belongs to, including through nesting |
Live Execution (ad-hoc commands)
- Admins can send a one-off command to a host without creating a rule.
- The command runs on the agent's next check-in; the console polls for the result every 5 seconds.
- You get stdout, stderr and exit code, with search and copy.
- The server checks each command against a blocklist and an interactive-command policy before sending it. Every request, including blocked and rejected ones, is written to the audit log with the user's name.
Use it to verify a setting or test a command before turning it into a rule.
Common tasks
- Find out why a host fails: filter Status = Unverified, open the host, check Executions for the failing rules.
- Troubleshoot an agent: check Agent Logs and Live Debug; check the Enrollment column for certificate problems.
- Fleet view: filter by distribution, version or architecture to plan upgrades.
Try LEA Platform on your own servers:
Start a free POCTry it on your own servers.
30 days, up to 25 endpoints, every feature. We help you install it and agree on success criteria first.