CIs are not getting created despite correct payload and IRE simulation

nicks8850 · yesterday

Here is the payload.

{
"items": [
{
"className": "cmdb_ci_win_server",
"values": {
"sys_id": "bf0dd0ab3b9c6a10df0f234dfgdwer9"
},
"internal_id": "59920214-5aaf-4367-9f02-3e583716b486"
},
{
"className": "cmdb_ci_appl_generic",
"values": {
"tcp_port": "",
"running_process_key_parameters": "\"E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe\" run",
"discovery_source": "ServiceNow",
"name": "Tableau Server Application Manager@myHostname",
"running_process_command": "E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe",
"classifier": "1e57d97a3b1c031083d670e643e45a43",
"running_process": "32b1b5453b810f1013c7c2c643e45aac",
"pid": "5432",
"version": "2025.3",
"sys_class_name": "cmdb_ci_appl_generic"
},
"sys_object_source_info": {
"source_name": "ServiceNow",
"source_native_key": "TableauServerApplicationManager::@myHostname"
},
"internal_id": "f3199f2c-6e9b-4a6a-aa4c-d2eab6743e8b"
},
{
"className": "cmdb_ci_appl_generic",
"values": {
"tcp_port": "",
"running_process_key_parameters": "\"E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe\" run",
"discovery_source": "ServiceNow",
"name": "Tableau VizQL Server@myHostname",
"running_process_command": "E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe",
"classifier": "1e57d97a3b1c031083d670e643e45a43",
"running_process": "32b1b5453b810f1013c7c2c643e45aac",
"pid": "5432",
"version": "2025.3",
"sys_class_name": "cmdb_ci_appl_generic"
},
"sys_object_source_info": {
"source_name": "ServiceNow",
"source_native_key": "TableauVizQLServer::@myHostname"
},
"internal_id": "6c246859-3137-48fd-a2f8-4283d25ec7d1"
},
{
"className": "cmdb_ci_appl_generic",
"values": {
"tcp_port": "",
"running_process_key_parameters": "\"E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe\" run",
"discovery_source": "ServiceNow",
"name": "Tableau Server VizPortal@myHostname",
"running_process_command": "E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe",
"classifier": "1e57d97a3b1c031083d670e643e45a43",
"running_process": "32b1b5453b810f1013c7c2c643e45aac",
"pid": "5432",
"version": "2025.3",
"sys_class_name": "cmdb_ci_appl_generic"
},
"sys_object_source_info": {
"source_name": "ServiceNow",
"source_native_key": "TableauServerVizPortal::@myHostname"
},
"internal_id": "76e313c5-abc9-422d-a2fe-fd744ab4c0bc"
}
],
"relations": [
{
"type": "Runs on::Runs",
"child": 0,
"parent": 1
},
{
"type": "Runs on::Runs",
"child": 0,
"parent": 2
},
{
"type": "Runs on::Runs",
"child": 0,
"parent": 3
}
],
"mainCiType": "cmdb_ci_appl_generic"
}

++++++++++++++++++++++++++++++++++++

TEST IRE Results:

++++++++++++++++++++++++++++++++

{
"items": [
{
"className": "cmdb_ci_win_server",
"values": {
"sys_id": "bf0dd0ab3b9c6a10df0f0c54c3e45a79"
},
"internal_id": "59920214-5aaf-4367-9f02-3e583716b486"
},
{
"className": "cmdb_ci_appl_generic",
"values": {
"tcp_port": "",
"running_process_key_parameters": "\"E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe\" run",
"discovery_source": "ServiceNow",
"name": "Tableau Server Application Manager@myHostname",
"running_process_command": "E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe",
"classifier": "1e57d97a3b1c031083d670e643e45a43",
"running_process": "32b1b5453b810f1013c7c2c643e45aac",
"pid": "5432",
"version": "2025.3",
"sys_class_name": "cmdb_ci_appl_generic"
},
"sys_object_source_info": {
"source_name": "ServiceNow",
"source_native_key": "TableauServerApplicationManager::@myHostname"
},
"internal_id": "f3199f2c-6e9b-4a6a-aa4c-d2eab6743e8b"
},
{
"className": "cmdb_ci_appl_generic",
"values": {
"tcp_port": "",
"running_process_key_parameters": "\"E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe\" run",
"discovery_source": "ServiceNow",
"name": "Tableau VizQL Server@myHostname",
"running_process_command": "E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe",
"classifier": "1e57d97a3b1c031083d670e643e45a43",
"running_process": "32b1b5453b810f1013c7c2c643e45aac",
"pid": "5432",
"version": "2025.3",
"sys_class_name": "cmdb_ci_appl_generic"
},
"sys_object_source_info": {
"source_name": "ServiceNow",
"source_native_key": "TableauVizQLServer::@myHostname"
},
"internal_id": "6c246859-3137-48fd-a2f8-4283d25ec7d1"
},
{
"className": "cmdb_ci_appl_generic",
"values": {
"tcp_port": "",
"running_process_key_parameters": "\"E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe\" run",
"discovery_source": "ServiceNow",
"name": "Tableau Server VizPortal@myHostname",
"running_process_command": "E:\\Program Files\\Tableau\\Tableau Server\\data\\tabsvc\\services\\tabsvc_0.20253.26.0403.1112\\tabsvc\\tabsvc.exe",
"classifier": "1e57d97a3b1c031083d670e643e45a43",
"running_process": "32b1b5453b810f1013c7c2c643e45aac",
"pid": "5432",
"version": "2025.3",
"sys_class_name": "cmdb_ci_appl_generic"
},
"sys_object_source_info": {
"source_name": "ServiceNow",
"source_native_key": "TableauServerVizPortal::@myHostname"
},
"internal_id": "76e313c5-abc9-422d-a2fe-fd744ab4c0bc"
}
],
"relations": [
{
"type": "Runs on::Runs",
"child": 0,
"parent": 1
},
{
"type": "Runs on::Runs",
"child": 0,
"parent": 2
},
{
"type": "Runs on::Runs",
"child": 0,
"parent": 3
}
],
"mainCiType": "cmdb_ci_appl_generic"
}

+++++++++++++++++++++++++++++++

Vishnu-K · yesterday

Hi @nicks8850 ,

Looking at your payload, a couple of things stand out.

The relationship direction is inverted. You have child: 0 (the win_server) and
parent: 1/2/3 (the apps), but for "Runs on::Runs" the server is the parent and
the application is the child. Since cmdb_ci_appl_generic is a dependent CI class,
IRE requires a valid hosting relationship to an existing server CI before it will
create it — if the direction is wrong it can't satisfy that hosting rule and the
application CIs get silently dropped.

Fix your relations to:

"relations": [
{ "type": "Runs on::Runs", "parent": 0, "child": 1 },
{ "type": "Runs on::Runs", "parent": 0, "child": 2 },
{ "type": "Runs on::Runs", "parent": 0, "child": 3 }
]

Also check cmdb_ire_partial_payloads or cmdb_ire_incomplete_payloads filtered by
recent timestamp - if the CIs are landing there it confirms IRE received the payload
but couldn't complete identification. For more detail, enable debug logging at
System Diagnostics > Debug Log Levels, add identification_engine at Debug level,
re-run the API call, and check System Log > All to see exactly where it failed.'

The simulation passing but the actual run failing is a common pattern with dependent
CIs - simulation resolves the server in memory, but the real call has to match it
in the database via the identification rule for cmdb_ci_win_server. Fix the relation
direction first and that should unblock it.

Hope this helps,

If it helped you please do mark it as helpful and accept the solution.

Thanks,

Vishnu

Tanushree Maiti · yesterday

Hi @nicks8850

Share the Error Screen shot or Response code/body

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti

Vasantharajan N · 17 hours ago

Hi @nicks8850 -

Could you try the Identification Simulator to check on the error based on the payload you posted here.

Step 2: Click on "Start" on "Start with Existing Payload"

Step 3:

1. Select Data Source as "ServiceNow" (based on the payload you shared).

2. Paste your payload

3. Click on "Run Simulation"

Step 4:

1. Select the logs or Output

2. Analyze the log or Output that gives the clarity of what is going wrong and why

Please try and let us know the outcome.

Thanks & Regards,
Vasanth

nicks8850 · 15 hours ago

This is the output.

Output Payload :

{
  "items": [
    {
      "className": "cmdb_ci_win_server",
      "sysId": "Unknown",
      "identifierEntrySysId": "Unknown",
      "errors": [
        {
          "error": "ABANDONED",
          "message": "Abandoned due to too many errors"
        }
      ],
      "identificationAttempts": [],
      "info": [],
      "mergedPayloadIds": [],
      "errorCount": 1,
      "warningCount": 0,
      "markers": [],
      "inputIndices": [
        0
      ]
    },
    {
      "className": "cmdb_ci_appl_generic",
      "sysId": "Unknown",
      "identifierEntrySysId": "Unknown",
      "errors": [
        {
          "error": "DUPLICATE_PAYLOAD_RECORDS",
          "message": "Found duplicate items in the payload (index 1 and 2), using className [cmdb_ci_appl] and fields [running_process_command,running_process_key_parameters,sys_class_name]. Remove duplicate items from the payload"
        },
        {
          "error": "DUPLICATE_PAYLOAD_RECORDS",
          "message": "Found duplicate items in the payload (index 1 and 3), using className [cmdb_ci_appl] and fields [running_process_command,running_process_key_parameters,sys_class_name]. Remove duplicate items from the payload"
        }
      ],
      "identificationAttempts": [],
      "duplicateIndices": [
        2,
        3
      ],
      "info": [],
      "mergedPayloadIds": [],
      "errorCount": 2,
      "warningCount": 0,
      "markers": [],
      "inputIndices": [
        1
      ]
    },
    {
      "className": "cmdb_ci_appl_generic",
      "sysId": "Unknown",
      "identifierEntrySysId": "Unknown",
      "errors": [
        {
          "error": "DUPLICATE_PAYLOAD_RECORDS",
          "message": "Found duplicate items in the payload (index 2 and 1), using className [cmdb_ci_appl] and fields [running_process_command,running_process_key_parameters,sys_class_name]. Remove duplicate items from the payload"
        },
        {
          "error": "DUPLICATE_PAYLOAD_RECORDS",
          "message": "Found duplicate items in the payload (index 2 and 3), using className [cmdb_ci_appl] and fields [running_process_command,running_process_key_parameters,sys_class_name]. Remove duplicate items from the payload"
        }
      ],
      "identificationAttempts": [],
      "duplicateIndices": [
        3
      ],
      "info": [],
      "mergedPayloadIds": [],
      "errorCount": 2,
      "warningCount": 0,
      "markers": [],
      "inputIndices": [
        2
      ]
    },
    {
      "className": "cmdb_ci_appl_generic",
      "sysId": "Unknown",
      "identifierEntrySysId": "Unknown",
      "errors": [
        {
          "error": "DUPLICATE_PAYLOAD_RECORDS",
          "message": "Found duplicate items in the payload (index 3 and 1), using className [cmdb_ci_appl] and fields [running_process_command,running_process_key_parameters,sys_class_name]. Remove duplicate items from the payload"
        },
        {
          "error": "DUPLICATE_PAYLOAD_RECORDS",
          "message": "Found duplicate items in the payload (index 3 and 2), using className [cmdb_ci_appl] and fields [running_process_command,running_process_key_parameters,sys_class_name]. Remove duplicate items from the payload"
        }
      ],
      "identificationAttempts": [],
      "info": [],
      "mergedPayloadIds": [],
      "errorCount": 2,
      "warningCount": 0,
      "markers": [],
      "inputIndices": [
        3
      ]
    }
  ],
  "additionalCommittedItems": [],
  "relations": [
    {
      "className": "cmdb_rel_ci",
      "sysId": "Unknown",
      "identifierEntrySysId": "Unknown",
      "errors": [
        {
          "error": "ABANDONED",
          "message": "Abandoned due to too many errors"
        }
      ],
      "mergedPayloadIds": [],
      "errorCount": 1,
      "warningCount": 0,
      "markers": [],
      "inputIndices": [
        0
      ]
    },
    {
      "className": "cmdb_rel_ci",
      "sysId": "Unknown",
      "identifierEntrySysId": "Unknown",
      "errors": [
        {
          "error": "ABANDONED",
          "message": "Abandoned due to too many errors"
        }
      ],
      "mergedPayloadIds": [],
      "errorCount": 1,
      "warningCount": 0,
      "markers": [],
      "inputIndices": [
        1
      ]
    },
    {
      "className": "cmdb_rel_ci",
      "sysId": "Unknown",
      "identifierEntrySysId": "Unknown",
      "errors": [
        {
          "error": "ABANDONED",
          "message": "Abandoned due to too many errors"
        }
      ],
      "mergedPayloadIds": [],
      "errorCount": 1,
      "warningCount": 0,
      "markers": [],
      "inputIndices": [
        2
      ]
    }
  ],
  "additionalCommittedRelations": []
}


Now I am wondering why it is checking any other Identification rule if I am specifically passing discovery_source and source_native_key attribute in the payload by setting them manually in the pattern.


lougoutput attached.