Custom Issues

Create Custom Issues when you need to detect and remediate issues that aren't included in ControlUp's built-in issue catalog. If an issue is included in ControlUp's built-in issue catalog but the default remediation is either unavailable or insufficient, you can add a custom remediation to a built-in issue.

After creating a Custom Issue, you can add it to a Template's scanning scope. Custom Issues are indicated by an icon (this icon also appears in other areas of the application to indicate a Custom Issue):

How it works

A Custom Issue uses scan scripts to search for an issue and remediation scripts to perform an action to fix the issue. When a Template scans a device for a Custom Issue:

1. The Template runs scan scripts.
   • If all scan scripts return their expected outputs, then the issue is not detected and the Template doesn't perform any further action.
   • If at least one scan script doesn't return its expected output, then the issue is detected and the Template proceeds to step 2.
2. The Template runs remediation scripts on the device.
3. The Template runs the scan scripts for a second time to check if the issue has been fixed.
   • If all scan scripts now return their expected outputs, then the remediation is marked as successful.
   • If at least one scan script still doesn't return its expected output, then the remediation is marked as a failure.

How to create a Custom Issue

1. Create the scan and remediation scripts and add them to ControlUp for Compliance. Read How to Add Scripts for details.
   • Scan scripts must return an output that can be used to determine whether a device has the issue.
   • Remediation scripts should perform some action on a device to fix the issue.
2. From the Secure DX section of the DEX platform, go to Configuration > Custom Issues and click Add Custom Issue.
3. Select Create Custom Issue.
4. Enter a Name and Description for the Custom Issue
5. Select a Scan Severity for the issue. A higher severity means that the issue will have a greater impact on the Issue score and Device score when detected.
6. Select the category and subcategory for the scan. The Custom Issue will appear in the selected category when creating a Template, and when viewing detected issues on our dashboards.
7. Add one or more scan scripts and enter their expected output under normal circumstances when there is no issue on the device.
8. Add one or more remediation scripts. If you enable Require device restart, then the remediation is marked as successful only after the device restarts. The device will automatically restart if Auto Restart is enabled in the Template's settings. Learn more about remediation statuses.