Part of the Administration reference. API Restrictions | Admin Tools | Audit Logs | Compliance
Overview
The Compliance panel (in the Audit tab) provides tools for monitoring configuration integrity:
- Integrity Report - one-shot CSV snapshot of all system data with SHA-256 hashes
- Baselines - saved snapshots of configuration state at a point in time
- Drift Checks - compare current state against a baseline to detect changes
All baseline and drift check operations are recorded in the Settings Audit.
Integrity report
Generates a downloadable CSV report of the entire system state - scripts, settings, whitelists, blacklists, global variables, labels, and folders. Each entry includes a SHA-256 hash for verification.
| Column | Description |
|---|---|
category |
Data category (scripts, settings, labels, etc.) |
entity_name |
Entity name or identifier |
property_summary |
Key properties snapshot |
hash |
SHA-256 hash of the entity data |
Click Generate Report to download. The report captures the current state and is not stored.
Baselines
A baseline is a point-in-time snapshot of your configuration. Use baselines to detect changes over time.
Creating a baseline
- Click Create Baseline
- Enter a name (required, max 200 characters) and optional description
- Configure the scope - which sections to include:
- Scripts (optionally filtered by folder or label)
- Settings
- Custom Whitelists / Blacklists
- Global Variables
- Labels / Folders
- Optionally enable Auto-check for scheduled monitoring
- Click Create
The baseline captures the current state and computes SHA-256 hashes for all included data.
Script filtering
When including scripts in the baseline scope, you can filter by:
| Mode | Description |
|---|---|
| All | Include every script |
| By folder | Include scripts in specific folders |
| By label | Include scripts with specific labels |
Managing baselines
Each baseline card shows the name, script count, creation date, and auto-check status. Available actions:
- Check Now - run a drift check immediately
- Auto-check toggle - enable/disable scheduled checks
- Delete - remove the baseline and all its drift results
Drift checks
A drift check compares the current system state against a saved baseline to detect what has changed.
Running a check
Click Check Now on any baseline card. The check:
- Captures the current system state using the same scope as the baseline
- Computes SHA-256 hashes for all current data
- Compares baseline vs. current hashes to detect additions, modifications, and removals
- Stores the result with detailed property-level diffs
Result status
| Status | Meaning |
|---|---|
| Clean | No changes detected - current state matches the baseline |
| Drifted | Changes detected - one or more items differ from the baseline |
Viewing results
Expand a baseline card to see its drift check history:
| Column | Description |
|---|---|
| Date | When the check was run |
| Status | Clean or Drifted |
| Trigger | Manual or Scheduled |
| Changes | Summary of added/modified/removed items |
| Duration | Execution time |
Click a result to see detailed changes grouped by category. For modified scripts, individual property changes are shown with baseline and current values side by side.
Auto-check
Enable auto-check on a baseline to run drift checks automatically on a schedule. Toggle it on the baseline card or during creation.
Scheduled checks store results the same way as manual checks - viewable in the baseline’s drift history.
CSV export
Each drift result can be exported as a CSV file with detailed change information.
| Column | Description |
|---|---|
category |
Data category (scripts, settings, labels, etc.) |
entity_id |
Entity UUID |
entity_name |
Entity name |
property |
Changed property name |
baseline_value |
Value in the baseline |
current_value |
Current value |
status |
Change type (added, modified, removed) |
detected_at |
Timestamp of the drift check |
Click the CSV button on any drift result to download.
Next steps
- Administration - All admin configuration
- Audit Logs - Settings and script execution audit
- Admin Tools - Import/export, health check, diagnostics
