We use only offline audit of several devices via Audit scripts.
When importing the results (about 160 xml files), sometimes 2 differents devices are merging in a single device in the OpenAudit database. A typical case is when the computer have a dual boot : Linux and Windows .
What's the criterias of OpenAudit engine to create or merge audit script results in the Database ?
Thanks you for your help.
Open Audit Community and Entreprise 2.0.11 (Ubuntu 16.04 LTS)
Simple answer to this one...
If the device audit results show the same UUID (which they will if they dual boot and you have an audit result for each booted OS), then the devices will be matched.
Your best bet is to go through the configuration items match_* and see if you can derive a combination that will satisfy your needs.