STIG Metrics from history for burndown report

[TacticalRhino]

Does there currently exist, or can a feature be added, that will easily give me data on findings closed within specified timeframes and potentially compare original import history with current? I'm looking for a way to report to leadership our ongoing burndown by collection and haven't been able to find a way to cleanly accomplish this. Also, we don't have archived CKLS so we can't reference back to the creation of the collection. TIA!

[cd-rite]

Hi @TacticalRhino
While STIGMan does maintain history records for individual Reviews, we do not currently offer a way to calculate metrics for particular date ranges or offer a report comparing current state of a Collection vs a date in the past. In theory our review_history endpoints return enough data that could be used to compare the current state of a Review vs it's state in the past, but generating a report in this way might be quite heavyweight for large Collections.

Depending on the granularity you require, you could export a .csv of a Collection's metrics every night, and perhaps use Excel to show change over time. However, this will not break out any specific findings that were closed during that timeframe, just the change in counts over time for your Assets.

I believe some groups have written their own client for our API that they use to capture nightly "snapshots" of our Collection metrics data, and then build their reports from that aggregation. This sort of automates the manual process I suggested above, and might produce the kind of burndown report you mentioned, but we do not currently generate a report like this. I believe those projects are internal to those groups and are not available publicly.

Thank you for the suggestion, we will give some thought about how we might satisfy these types of feature requests in the future!