How to create a transform map for Vulnerable Items and Configuration Items that need to be created?

[sumanth maram]

Hi Everyone, 

I am creating a vulnerability integration for vulnerability response. My main question is how do I create a transform map that will match existing CIs and create new ones if they do not exist and then create the Vulnerable Item mapping with that identified/new CI. 

I am aware of how IRE works, but using IRE requires me to have a separate transform map and data source. I do not want to have separate apis. I want one api that returns host data and cve data. One data source and transform maps that would allow the above. I have tried using the OnBefore script but I am having issues with the instantiation. Please refer to this post for more information on that. 

https://www.servicenow.com/community/developer-forum/onbefore-script-import-set-undefined/td-p/27491...

All help is welcomed! 

Useful Information:
Transform Maps vs. Robust Maps: https://www.servicenow.com/community/itsm-forum/standard-transform-map-vs-robust-transform-map/m-p/4...

OnBefore Script Properties for Common Transforms: https://docs.servicenow.com/bundle/vancouver-integrate-applications/page/script/server-scripting/ref...

Adding IRE Scripts: https://docs.servicenow.com/bundle/vancouver-servicenow-platform/page/product/configuration-manageme...

Using IRE in OnBefore Script: https://www.servicenow.com/community/itom-forum/i-want-to-use-ire-with-importset/m-p/967754

[palanikumar]

Hi,

Will you report Vulnerability only on Servers or will it include database and application servers. Does your vulnerability tool send data to identify the rite CI and ci type?

Thank you,

Palani

[sumanth maram]

Hi @palanikumar , 

The data will have a device type field which will determine whether it is a desktop or a server. We can then identify based on other fields for specific classes.