When we consider compliance, there are a number of common areas we can report on. To do the actual reporting, we can use whatever method we choose. This could be one of the previously discussed ways, such as processing the stored reports or using PuppetDB.

We already looked at the first big piece in showing compliance. That is, demonstrating when the Puppet run last happened on each of our hosts. We have shown an easy way to accomplish this with both PuppetDB and stored reports, earlier in this chapter. The information on the last run status exists in all of the report formats and can easily be reported on. Setting up alerts on that data is also easily done using concepts, shown earlier wrapped up with some alerting logic.

However, we've not approached reporting on the auditing data. Luckily, reporting on that is not much more difficult.

The report format contains a wealth of information on the run, as well as data on the facts present on a host that can be used to...