From f721043d866c2cf321859982b6d7767b4fda9d35 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Mon, 29 Jun 2026 10:24:22 -0400 Subject: [PATCH] Update policy automation script behavior description (#48120) - @noahtalerman: We updated the UI to say "Fail" instead of "No" and "Pass" instead of "Yes" --- articles/policy-automation-run-script.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/articles/policy-automation-run-script.md b/articles/policy-automation-run-script.md index 1313f8b684..f6de140133 100644 --- a/articles/policy-automation-run-script.md +++ b/articles/policy-automation-run-script.md @@ -23,8 +23,8 @@ If the script fails, you can reset a script automation and trigger the script to ## How does it work? * Online hosts report policy status when on a configurable cadence, with hourly default. -* Fleet will send scripts to the hosts on the first policy failure (first "No" result for the host) or if a policy goes from "Yes" to "No". By default, policies that remain failed ("No") for a host in consecutive reports will not be resent to the script. -* To run the script on _every_ failing result, including consecutive failures ("No" -> "No"), set `continuous_automations_enabled` to `true` on the policy (_Available in Fleet Premium_). Because this can retry a script that doesn't resolve the policy, it may cause a retry loop. +* Fleet will send scripts to the hosts on the first policy failure or if a policy goes from "Pass" to "Fail". By default, policies that remain failed for a host in consecutive reports will not be resent to the script. +* To run the script on _every_ failing result, including consecutive failures, set `continuous_automations_enabled` to `true` on the policy (_Available in Fleet Premium_). Because this can retry a script that doesn't resolve the policy, it may cause a retry loop. > When script automation on a policy is added or switched to a different script, the policy's status will reset for associated hosts. This allows the newly attached script to run on hosts that had previously failed the policy.