Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

IntegrationHUB ETL data not matching on Identification Rule(name)

Rudi2
Giga Guru

Hi guys

I am having a weird issue were my one identification rule is not working. The Identification rule is only set on name because there will be multiple data sources updating parts of the ci. The target table is set to a CMDB table extended from cmdb_ci_server. 

I have turned off the system property for the use of sys_object_source. 

The name on the record is EXACTLY the same as the mapped name in the ETL. If I test with Identification Payload Simulator then it does not match and I used the samples below.


If I Test with DBDATASERVER01 and the server name is DBDATASERVER01 it does not match. (it wants to insert and it should not)
If I Test with DBDATASERVER01 and the server name is dbdataserver01 it DOES match. 
If I Test with DBDATASERVER and the server name is DBDATASERVER it DOES match. 

I am extracting the name from the fqdn and making it upper case together with toString().

Anyone know perhaps what the issue can be?

Sample payload:

{
  "items": [
    {
      "className": "u_cmdb_ci_test_server",
      "values": {
        "name": "DBDATASERVER01",
        "discovery_source": "SG-Defender",
        "u_update_time": "2025-10-15 06:36:01"
      },
      "settings": {
        "updateWithoutDowngrade": "true"
      }
    }
  ]}

Response:

{
  "items": [
    {
      "identifierEntrySysId": "Unknown",
      "identificationAttempts": [
        {
          "info": "sys_object_source SKIPPED",
          "attemptResult": "SKIPPED",
          "searchOnTable": "sys_object_source",
          "identifierName": "",
          "attributes": [
            "source_name",
            "source_native_key"
          ]
        },
        {
          "attemptResult": "NO_MATCH",
          "hybridEntryCiAttributes": [],
          "searchOnTable": "u_cmdb_ci_test_server",
          "identifierName": "Test Server",
          "attributes": [
            "name"
          ]
        }
      ],
      "info": [],
      "errorCount": 2,
      "warningCount": 0,
      "mergedPayloadIds": [],
      "inputIndices": [
        0
      ],
      "markers": [],
      "className": "u_cmdb_ci_test_server",
      "sysId": "Unknown",
      "errors": [
        {
          "error": "INSERT_NOT_ALLOWED_FOR_SOURCE",
          "message": "Insert into [u_cmdb_ci_test_server] is blocked for data source [SG-Defender] by IRE data source rule"
        },
        {
          "error": "ABANDONED",
          "message": "Too many other errors"
        }
      ]
    }
  ],
  "additionalCommittedItems": [],
  "relations": [],
  "additionalCommittedRelations": []
}

1 ACCEPTED SOLUTION

Rudi2
Giga Guru

The solution to our problem for Defender is that it just does not use the IRE, but still looking at sys_object_source even though object source was turned off. Looking at the data, I am now using a scheduled job to insert my own records to match from Defender to the servers on Object Source and the SNK stays on name for the other imports that also needs to update those servers. The Defender data is through a plugin and uses a data stream and our other basic imports are using scripted API's and they are running through the IRE without any problems. Pasting a link to a document I have read already does not help.

Regards

View solution in original post

2 REPLIES 2

Abbas_5
Tera Sage
Tera Sage

Hello @Rudi2,

Please refer to the link below:
https://www.servicenow.com/docs/bundle/zurich-servicenow-platform/page/product/configuration-managem...

 

If it is helpful, please hit the thumbs-up button and accept the correct solution by referring to this solution in the future. It will be helpful to them.

 

Thanks & Regards,

Abbas Shaik

Rudi2
Giga Guru

The solution to our problem for Defender is that it just does not use the IRE, but still looking at sys_object_source even though object source was turned off. Looking at the data, I am now using a scheduled job to insert my own records to match from Defender to the servers on Object Source and the SNK stays on name for the other imports that also needs to update those servers. The Defender data is through a plugin and uses a data stream and our other basic imports are using scripted API's and they are running through the IRE without any problems. Pasting a link to a document I have read already does not help.

Regards