Identification rule not working

[sry]

Hi, we are working on Armis-ServiceNow integration. we have observed an issue during Identification.

1) we import a Server CI into cmdb.

2) we change mac_address manually.

3) we import the same server CI into cmdb with original mac_address.

During the 3rd step the system is no updating the mac_address as it supposed to over write the manual change.

This issue is not reflecting on computer class CIs. the identification working on computer class but not on server class. both computer and server have the same Identification rules. please help us why the server CI is not identified by IRE rules.

please help us.

Thanks,

Sry

[VikMach]

This is not an issue.
ServiceNow has configured the cmdb_ci_network_adapter table to fetch and store the MAC Address for different CI's. (In your case it is Server CI). If you open cmdb_ci_network_adapter table and search with your Server CI you will find the MAC Address there. This is because a device can have multiple MAC Address and CMDB Server table only has one field to store one value. Also, there is no pattern created by ServiceNow to update MAC Address in the CMDB Server table. To validate this, you can Retrieve the Payload from input ECC queue from HorizontalDiscoveryProbe into Pattern Designer against your Server IP or directly run the Debug against your Server IP and you will not see MAC Address in the payload that is returned from your MID Server.
If you wish to update the MAC Address into Server Table then you need to create custom pattern extending the Original Pattern and then set the parameter in the CMDB Server table. (DO NOT MODIFY THE ORIGINAL PATTERN. IT IS NOT RECOMMENDED).

How to create custom patter? See docs below. You can take example reference from below docs or open one of the OOB Pattern libraries and mimic for your requirement.
Example of creating an application pattern

Hope this helps.

Regards,
Vikas K

[sry]

Hi Vikas, thank you for the prompt reply.

we are not doing discovery, it is SGC Armis integration. we have scheduled job to load the data from Armis instance (thirdparty application). The data goes through Robust transform map. i am not sure it is an issue of cmdb_ci_network_adapter.

Thanks,

Sry

[VikMach]

Ah, I see!
I jumped the gun.
Well in that scenario, are you not able to see the payload received from SGC?
Before data gets transformed you can see that in the import set table. Are you not able to see the Import Set logs?
If you're getting the required value from Armis SGC, have you configured reconciliation rule to pick the data from respective import set? This is set to none by default, unless you have configured it and if more than one what is the order and precedence.

[sry]

Hi Vikas, yes we can see the payload. one of them labeled API_DATA, and other field is DATA. i am not sure which one i should consider. i don't know what to do from the payload.

Thanks,

Sry