---
agentTools:
  projectIndex: https://regscale.readme.io/llms.txt
---

# ROH 6.31.1.0

# **Purpose**

RegScale Orchestration Hub (ROH) enables organizations to automate the import and export of data between RegScale and external systems through configurable integrations and commands.

This beta release is intended for early adopters and validation of core orchestration capabilities. Functionality, supported integrations, and performance characteristics may change before General Availability (GA).

# What's Included

## Core Capabilities

ROH Beta Supports:

* Multiple scheduled job configurations per integration to support different data sources, configuration options, secrets, etc.
* Run instant jobs for ad hoc data loads
* **Job splitting** enables breaking larger jobs up into multiple smaller batches to support processing very large collections of data more quickly
* Review logs of currently running job executions or previously completed job executions
* Review of the health of different ROH components from a dashboard about job workers
* Managing different sets of credentials and settings in a secret set so the same kind of job can be run against multiple different environment with different credentials or environments
* Executing jobs ad-hoc by a user pressing a button or running a job on a schedule without direct user interaction

## Newly Supported Integrations

| **Integration**                   | **Command**                 |
| --------------------------------- | --------------------------- |
| AWS                               | sync\_assets                |
|                                   | sync\_findings              |
|                                   | sync\_findings\_and\_assets |
|                                   | sync\_compliance            |
|                                   | sync\_config\_compliance    |
|                                   | sync\_kms                   |
|                                   | sync\_org                   |
|                                   | sync\_iam                   |
|                                   | sync\_guardduty             |
|                                   | sync\_s3                    |
|                                   | sync\_cloudtrail            |
|                                   | sync\_cloudwatch            |
|                                   | sync\_cloudwatch\_ex        |
|                                   | sync\_ssm                   |
| Axonius                           | sync\_assets                |
|                                   | sync\_findings              |
|                                   | sync\_all                   |
|                                   | sync\_saved\_queries        |
| Azure Active Directory            | sync\_admins                |
|                                   | sync\_general               |
|                                   | sync\_readonly              |
| CrowdStrike                       | collect\_evidence           |
|                                   | sync\_assets                |
|                                   | sync\_compliance            |
|                                   | sync\_incidents             |
|                                   | sync\_vulnerabilities       |
| Entra Evidence Microsoft Defender | collect\_entra\_evidence    |
| Google BigQuery                   | collect\_evidence           |
|                                   | sync\_assets                |
|                                   | sync\_compliance            |
|                                   | sync\_findings              |
| Jira                              | issues                      |
|                                   | tasks                       |
| Palo Alto Prisma Cloud            | sync\_hosts                 |
|                                   | sync\_images                |
|                                   | sync\_sbom                  |
| Qualys                            | sync\_cis\_report           |
|                                   | sync\_qualys                |
| SentinelOne                       | sync\_assets                |
|                                   | sync\_findings              |
|                                   | sync\_threats               |
|                                   | sync\_vulnerabilities       |
|                                   | sync\_all                   |
| Rapid7                            | sync\_all                   |
|                                   | sync\_assets                |
|                                   | sync\_findings              |
| Tenable.io                        | sync\_all                   |
|                                   | sync\_assets                |
|                                   | sync\_findings              |
| Tenable SC                        | sync\_all                   |
|                                   | sync\_assets                |
|                                   | sync\_compliance            |
|                                   | sync\_findings              |
| Wiz                               | inventory                   |
|                                   | issues                      |
|                                   | vulnerabilities             |
|                                   | sync\_compliance            |
|                                   | compliance\_report          |

## Known Limitations

### Functional Limitations

* A ROH deployment can **only execute two jobs** at the same time. This behavior is not dynamic.
* A ROH deployment can only talk to integrations using HTTP 1.1, HTTP 2 is disabled for stability purposes.

### Performance Limitations

* **Issue Ingestion Limitations**

  * The issue ingest functionality of the core RegScale Platform does not completely performantly for smaller batches of 100 items or less at a time. For **integration\_command sync\_all** and **integration\_command sync\_issues** commands, add the secret **issuesBatchSize** **500**, Type Integer, and Category General.

* **Vulnerability Ingestion Limitations**

  * The vulnerability ingestion functionality of the core RegScale Platform does not perform stably for large batches over 1,000 items at a time. For **integration\_command sync\_all** and **integration\_command sync\_vulnerabilities** commands, add the secret **vulnerabilityBatchSize** **500**, Type Integer, and Category General.

* **Integration-specific Limitations**

  * **Azure AD**

    * The **azure sync\_admins**, **azure** **sync\_general,** **azure sync\_readonly** command is not near real-time. With default settings, the command will ingest approximately 333 users per minute successfully.
    * The **azure sync\_admins** command will not perform reliably for ingesting more than 50,000 users at one time.

  * **Jira**

    * The **jira issues** command is not near real-time. With default settings, the command will ingest approximately 500 issues per minute.
    * The **jira tasks** command is not near real-time. With default settings, the command will ingest approximately 540 issues per minute.

  * **Rapid7**

    * The **rapid7 sync\_all** command is not near real-time. With default settings, the command will ingest approximately 2,100 items per minute.
    * The **rapid7 sync\_assets** command is not near real-time. With default settings, the command will ingest approximately 3,300 items per minute.

  * **Tenable.io**

    * The **tenable\_io sync\_assets** command is not near real-time. With default settings, the command will ingest approximately 1,300 assets per minute.
    * The **tenable\_io sync\_findings** command is not near real-time. With default settings, the command will ingest approximately 1,100 findings per minute.