Struggling with an odd one here... We have SCCM 2012 computer identity coming in.
The Transform Map is actually built to coalesce on ServiceNow sys_id, with a lot of supporting logic/script.
There are a number of cases now, where we find basic computer information such as serial number, chassis type, model, and name flip flopping back and forth and back and forth again.
A view of the CI record: It shows Sources (2) where two SCCM entries with unique Correlation IDs (Resource IDs) are reported
And a further look into the audit history of this CI to illustrate these basic fields that keep flip flop changing back and forth:
CI Audit history list:
Is this a simple case of multiple Correlation IDs coming from SCCM, perhaps due to re imaging of the machine, or other types of typical work?
Suggested logic to prevent this?
Thanks for all ideas
In SCCM the Correlation ID (Resource ID in SCCM) can change if the computer is reimaged, or sometimes just if someone redeploys the local SCCM app to resolve some other issue (maybe it is not reporting).
In this SCCM history log from an affected computer, you can see that the laptop linked to the Correlation ID changed on 08/31/2023 from XXXXXX00L to XXXXXX93L when we reimaged the device.
After this date, the Correlation ID refers to a different device. Afterwards, our SNOW logs show it switches to the old computer and then to the new computer every night, when we synch.
Do you have any idea how to correct affected computers? We've tried editing the cmdb_serial_number.list and the computer records themselves, but they just switch back. Any idea how can we associate the new Correlation ID with XXXXXX00L ?
