Check your ILMT Audit Snapshot before an auditor does

Drop the ZIP that ILMT generated. In a few seconds you get a report: what is fine, what needs attention, in numbers and percentages.
Free, no sign-up, nothing uploaded.

The snapshot file never leaves your browser. No request carries the file. How to check that.

Drag the ZIP file here or click to choose it

Choose file ILMT-AuditSnapshot-*.zip, up to 20 MB.
Read the terms

How to generate an Audit Snapshot

  1. Log in to the ILMT console and open the All Metrics report (Reports menu).
  2. Set the reporting period, usually the last full quarter, and generate the snapshot only after that period has ended.
  3. Leave the computer group on All Computers and apply no filters. A snapshot made with a filter or from a smaller group covers only a slice of the environment, and an auditor will ask about the rest. The check looks at the period, the group and the filters: a narrowed scope is reported as a warning, a snapshot generated before the period ended as a problem.
  4. Make sure the report shows no "recalculation needed" notice. If it does, run the recalculation first.
  5. Click Audit Snapshot in the report bar, add a comment if you want one, click Generate and download the ZIP.
  6. Drop the ZIP into the box above. The file stays on your computer.

What the check looks at

An Audit Snapshot is the same set of files an IBM auditor receives. The check reads it the way an auditor would, in seven areas, and gives each one a score. The overall score is not an IBM metric and does not say whether you would pass an audit. It says whether the snapshot contains what it should and surfaces problems at an early stage, before anyone has to dig into the details of your environment.

  • Snapshot integrityComplete file set, SHA-256 checksums, the RSA signature, CSV structure against the snapshot's own manifest.
  • Configuration and currencyAge of the ILMT build, software catalog and PVU table. Filters, computer group, period, import, aggregation and recalculation status.
  • Infrastructure healthDisconnected computers, delayed uploads, outdated capacity scans, missing software scans, hosts that went silent, operating systems past End of Eligibility.
  • Virtualization and capacityIncomplete virtualization hierarchy, hosts counted at the default PVU rate, manual PVU changes, full capacity versus sub-capacity.
  • Software classificationUnconfirmed instances, Unknown metrics, exclusions without a comment, custom bundling, suppressed instances, audit trail activity.
  • Entitlements and part numbersProducts with usage but no imported part numbers, hybrid products, entitlements without usage, Non-Production variants.
  • Usage in the periodPeak and end-of-period value per product, drops from the peak, single-day spikes, gaps in daily measurements, consistency with the summary.

The tool is under active development. New checks are added regularly and compatibility with each new ILMT version is verified as it ships. If your snapshot comes from a version the tool does not know yet, the report says so plainly instead of guessing.

Disclaimer. The tool is provided free of charge and as is, without warranty of any kind, express or implied, including any warranty of completeness or accuracy of results or fitness for a particular purpose. It is intended solely as a quick, indicative visualisation of the data contained in an Audit Snapshot file. The score and findings do not constitute a licensing opinion, legal advice, a compliance assessment or any assurance as to the outcome of any audit. You use the tool at your own risk. To the extent permitted by law, ITT Tomasz Oniśk is not liable for decisions made on the basis of the report or for any damage arising from use of the tool, and no claims against the author arise from its use. Full terms: Terms of use.

Prefer to run it privately?

The offline version is the same tool in a single HTML file: no installation, no internet access, the data never leaves your computer. It is free and issued by name. Request it above or write to office@ilmtconsulting.com.

Questions people ask

Is the score official?

No. The thresholds and weights come from years of looking at ILMT environments, not from IBM. Two environments with the same score can be in very different shape. Read the list of findings, not just the number.

Can I anonymize server names before sending the snapshot?

No. The snapshot carries SHA-256 checksums and an RSA signature over them. Change a single byte in any file and the signature stops verifying, which is exactly what the digital signature check here looks at. If names must not reach IBM, raise it with the auditor before generating the file. Editing it afterwards produces an invalid snapshot.

Can the Audit Snapshot be generated automatically?

No. ILMT has no scheduler or API for the Audit Snapshot. It has to be generated by hand in the console (Reports, All Metrics, Audit Snapshot). That is why a quarterly reminder and a check of each file before archiving matter.

How can I check that nothing leaves my browser?

Open the developer tools of your browser (F12), switch to the Network tab and drop the ZIP. No request carries the file: it is read and parsed locally. What you will see is the site's analytics: if you accepted cookies, one event with the verdict and the score bucket goes out after the analysis, and without consent Google receives an anonymous ping with the same two values. Open that request and look at its payload: no file, no server name, no product.

What happens to my data?

None of your data is stored or passed on. Nothing leaves your browser: there is no server-side processing and no data is saved. The page only records that an analysis was completed, without any content from the file. If you would still rather not load the file on a website, ask for the offline version and run the tool on your own computer.

My score is lower than I expected. Is that bad?

Usually it means the tool found things an auditor would also find: operating systems past End of Eligibility, products without part numbers, hosts without VM Manager data. Most of them can be fixed in-house once they are on a list. That list is the point.

Can you look at it with me?

Yes. A 30-minute call is enough to go through the findings and tell you which ones matter. If the environment turns out to be fine, I will say so.

Services