- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
Hi guys
I am having a weird issue were my one identification rule is not working. The Identification rule is only set on name because there will be multiple data sources updating parts of the ci. The target table is set to a CMDB table extended from cmdb_ci_server.
I have turned off the system property for the use of sys_object_source.
The name on the record is EXACTLY the same as the mapped name in the ETL. If I test with Identification Payload Simulator then it does not match and I used the samples below.
If I Test with DBDATASERVER01 and the server name is DBDATASERVER01 it does not match. (it wants to insert and it should not)
If I Test with DBDATASERVER01 and the server name is dbdataserver01 it DOES match.
If I Test with DBDATASERVER and the server name is DBDATASERVER it DOES match.
I am extracting the name from the fqdn and making it upper case together with toString().
Anyone know perhaps what the issue can be?
Sample payload:
{
"items": [
{
"className": "u_cmdb_ci_test_server",
"values": {
"name": "DBDATASERVER01",
"discovery_source": "SG-Defender",
"u_update_time": "2025-10-15 06:36:01"
},
"settings": {
"updateWithoutDowngrade": "true"
}
}
]}Response:
{
"items": [
{
"identifierEntrySysId": "Unknown",
"identificationAttempts": [
{
"info": "sys_object_source SKIPPED",
"attemptResult": "SKIPPED",
"searchOnTable": "sys_object_source",
"identifierName": "",
"attributes": [
"source_name",
"source_native_key"
]
},
{
"attemptResult": "NO_MATCH",
"hybridEntryCiAttributes": [],
"searchOnTable": "u_cmdb_ci_test_server",
"identifierName": "Test Server",
"attributes": [
"name"
]
}
],
"info": [],
"errorCount": 2,
"warningCount": 0,
"mergedPayloadIds": [],
"inputIndices": [
0
],
"markers": [],
"className": "u_cmdb_ci_test_server",
"sysId": "Unknown",
"errors": [
{
"error": "INSERT_NOT_ALLOWED_FOR_SOURCE",
"message": "Insert into [u_cmdb_ci_test_server] is blocked for data source [SG-Defender] by IRE data source rule"
},
{
"error": "ABANDONED",
"message": "Too many other errors"
}
]
}
],
"additionalCommittedItems": [],
"relations": [],
"additionalCommittedRelations": []
}
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
The solution to our problem for Defender is that it just does not use the IRE, but still looking at sys_object_source even though object source was turned off. Looking at the data, I am now using a scheduled job to insert my own records to match from Defender to the servers on Object Source and the SNK stays on name for the other imports that also needs to update those servers. The Defender data is through a plugin and uses a data stream and our other basic imports are using scripted API's and they are running through the IRE without any problems. Pasting a link to a document I have read already does not help.
Regards
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Hello @Rudi2,
Please refer to the link below:
https://www.servicenow.com/docs/bundle/zurich-servicenow-platform/page/product/configuration-managem...
If it is helpful, please hit the thumbs-up button and accept the correct solution by referring to this solution in the future. It will be helpful to them.
Thanks & Regards,
Abbas Shaik
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
The solution to our problem for Defender is that it just does not use the IRE, but still looking at sys_object_source even though object source was turned off. Looking at the data, I am now using a scheduled job to insert my own records to match from Defender to the servers on Object Source and the SNK stays on name for the other imports that also needs to update those servers. The Defender data is through a plugin and uses a data stream and our other basic imports are using scripted API's and they are running through the IRE without any problems. Pasting a link to a document I have read already does not help.
Regards
