Skip to content

Documentation

Search & filters

The Compliance and Execution pages in LEA Platform share one filter system. The Execution page adds a rule name search.

Filters per page

Compliance pageExecution page
Host name searchHost name search
Status: All, Verified, Unverified, N/A, Active, InactiveRule name search
SeverityStatus: All, Verified, Unverified
Enrollment stateSeverity
GroupGroup
Metadata filtersMetadata filters

Your filter choices are remembered in the browser.

Metadata filters

Filter by attributes the agent reports from each host:

FieldExamples
Distribution NameUbuntu, Rocky, Oracle Linux, Alpine, macOS, Windows
Distribution Version22.04, 9.5
Operating SystemLinux, Darwin, Windows
Kernel Release6.8.0-49-generic
Architecturex86_64, aarch64, arm64
IP Address / Public IP10.0.0.12
Client Versionagent version, e.g. 2.0.2
LEA GUIDthe host's unique identifier
Taga dynamic tag value (see below)

Each filter uses one operator: equals, starts with, ends with or contains.

How filters combine

All active filters are combined with AND. Example: Distribution Name = Ubuntu and Architecture = aarch64 shows only Ubuntu hosts on ARM. Text search, status and group filters narrow the result further.

Active filters appear as chips under the search bar. Remove one with its X, or use Clear All.

Dynamic tags

A rule can store its output on the host as a dynamic tag (the rule's Command Info Key (tag) field, see Rules). For example, a rule with tag hostname stores the real hostname of each host.

To filter by a tag, choose Tag, pick the tag name from the list of tags your rules define, then enter the value. Dynamic tags can also drive group membership through JSONPath (see Groups).

Examples

All ARM hosts: Metadata → Architecture equals aarch64.

Failing Ubuntu hosts: Status = Unverified, then Metadata → Distribution Name equals Ubuntu.

Every host failing one rule: Execution page → rule name search → Status = Unverified.

Hosts on an old agent: Metadata → Client Version equals the old version, then export the list.

Try LEA Platform on your own servers:

Start a free POC

Try it on your own servers.

30 days, up to 25 endpoints, every feature. We help you install it and agree on success criteria first.