How to restrict creation or updation of Software installations through discovery

[Dharani7]

Hii All,

We have a requirement to restrict insertion or updation of software installations in cmdb_sam_sw_install table through discovery for servers, since we want this to be updated via tanium only . What will be the best approach to disable it through discovery . 

I have disabled software filter for both unix and windows under discovery configuration console , but still insertion is happening.  Not able to restrict it through  IRE  since it is not visible in class manager.

Can anyone suggest the best approach on this ?

[SP22]

Hello @Dharani7 ,

Could you please find the below video and let me know if it is useful or not.

https://www.youtube.com/watch?v=HQJG51qcd9U

Thanks
Santosh.p

[Dharani7]

Hii @SP22 ,

Thank you for the reply ,

This video is not helpful , if we enable restricted software field for software models, software installations will be deleted . But we need software installations to created or updated from Tanium .  Just want to know is there any  way to restrict ServiceNow discovery from capturing software installations and its updation in CMDB.

[SP22]

Hello @Dharani7,

Configure Identification and Reconciliation Rules (IRE):

Purpose: Ensure only Tanium can update software CIs.

step by step gudience:

1. Navigate to:
   Configuration > CI Class Manager

2. Search for Software CI Class:
   For example, cmdb_ci_spkg.

3. Open the Class:
   Click on the class name.

4. Go to Reconciliation Rules:

   • Click the Reconciliation Rules tab.
   • Review existing rules.

5. Edit/Create Rule:

   • Set Tanium as the preferred data source for relevant attributes (e.g., version, installation date).
   • Set Discovery as a lower priority or exclude it from updating these attributes.

6. Save the Rule.

[Dharani7]

Hii @SP22 ,

Software installation[cmdb_sam_sw_install] table is not available under CI class manager , since it is not extending cmdb_ci class  so reconciliation rule cannot be applied on it.