Search & filters
The Compliance and Execution pages in LEA Platform share one filter system. The Execution page adds a rule name search.
Filters per page
| Compliance page | Execution page |
|---|---|
| Host name search | Host name search |
| Status: All, Verified, Unverified, N/A, Active, Inactive | Rule name search |
| Severity | Status: All, Verified, Unverified |
| Enrollment state | Severity |
| Group | Group |
| Metadata filters | Metadata filters |
Your filter choices are remembered in the browser.
Metadata filters
Filter by attributes the agent reports from each host:
| Field | Examples |
|---|---|
| Distribution Name | Ubuntu, Rocky, Oracle Linux, Alpine, macOS, Windows |
| Distribution Version | 22.04, 9.5 |
| Operating System | Linux, Darwin, Windows |
| Kernel Release | 6.8.0-49-generic |
| Architecture | x86_64, aarch64, arm64 |
| IP Address / Public IP | 10.0.0.12 |
| Client Version | agent version, e.g. 2.0.2 |
| LEA GUID | the host's unique identifier |
| Tag | a dynamic tag value (see below) |
Each filter uses one operator: equals, starts with, ends with or contains.
How filters combine
All active filters are combined with AND. Example: Distribution Name = Ubuntu and Architecture = aarch64 shows only Ubuntu hosts on ARM. Text search, status and group filters narrow the result further.
Active filters appear as chips under the search bar. Remove one with its X, or use Clear All.
Dynamic tags
A rule can store its output on the host as a dynamic tag (the rule's Command Info Key (tag) field, see Rules). For example, a rule with tag hostname stores the real hostname of each host.
To filter by a tag, choose Tag, pick the tag name from the list of tags your rules define, then enter the value. Dynamic tags can also drive group membership through JSONPath (see Groups).
Examples
All ARM hosts: Metadata → Architecture equals aarch64.
Failing Ubuntu hosts: Status = Unverified, then Metadata → Distribution Name equals Ubuntu.
Every host failing one rule: Execution page → rule name search → Status = Unverified.
Hosts on an old agent: Metadata → Client Version equals the old version, then export the list.
Try LEA Platform on your own servers:
Start a free POCTry it on your own servers.
30 days, up to 25 endpoints, every feature. We help you install it and agree on success criteria first.