View Workload Manager rule findings

Preview

This product or feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. Pre-GA products and features are available "as is" and might have limited support. For more information, see the launch stage descriptions.

After you evaluate your workloads with Workload Manager, you can view Workload Manager rule findings on the dashboard to identify configuration risks, security vulnerabilities, and best practice deviations across your cloud resources.

This page describes how to view and filter rule findings on the Workload Manager dashboard.

For more information about rule findings, see About Workload Manager rule findings.

Before you begin

Before you view Workload Manager rule findings, ensure that you meet the following prerequisites:

• You have enabled Workload Manager for your project.
• You have the required roles and permissions.
• You have created and run at least one evaluation with the Share findings option enabled. For instructions, see Create and run an evaluation.

Required roles

To get the permissions that you need to view Workload Manager rule findings, ask your administrator to grant you the following IAM roles on your project:

• View rule findings:
  • Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer)
  • Workload Manager Evaluation Administrator (roles/workloadmanager.evaluationAdmin)

For more information about granting roles, see Manage access to projects, folders, and organizations.

These predefined roles contain the permissions required to view Workload Manager rule findings. To see the exact permissions that are required, expand the Required permissions section:

Required permissions

The following permissions are required to view Workload Manager rule findings:

• View rule findings: workloadmanager.findings.list

You might also be able to get these permissions with custom roles or other predefined roles.

For more information about roles in consumer and target projects, see IAM roles in consumer and target projects for evaluations.

View and filter rule findings

To view and filter Workload Manager rule findings in the Google Cloud console:

1. In the Google Cloud console, go to the Workload Manager page.

   Go to Workload Manager

2. Click the Rule findings tab.

3. Optional: To filter the findings, use any of the following controls above the table:

   • Category: filter by impact category, such as Reliability, Security, Performance, or Cost.
   • Severity: filter by severity level, such as Critical, High, Medium, or Low.
   • Workload type: filter by workload type, such as SAP or Oracle.
   • Filter bar: search by properties or keywords (for example, rule names or resource names).
   • Reset filters: clear all active filters.

4. In the findings table, review the evaluated findings. The table displays the following columns:

   • Rule name: the name of the evaluated best practice rule.
   • Category: the impact category of the rule finding.
   • Resource: the cloud resource that the rule evaluated.
   • Issues: the number of detected issues for the resource.
   • Severity: the severity level of the finding.
   • Evaluation ID: the name of the evaluation that generated the finding.
   • Source: the project that contains the evaluated resource.

What's next

• Learn more about Workload Manager rule findings.
• Learn how to create and run an evaluation.
• Learn how to view evaluation results and history.
• Learn how to view Workload Manager rule findings in Compute Engine.
• Review Identity and Access Management (IAM) roles and permissions for evaluations.
• Review Workload Manager best practices.