Discovering/Mapping Azure Application Security Groups

[Alex Becker]

Hello, 

Since ServiceNow stopped horizontal discovery for azure (recommends not using horizontal discovery).  We aren't able to discovery everything azure has.    

We now need to discovery Azure Application Security Groups and map them to there respective Resource Groups.  Cloud resource discovery doesnt discover this data but horizontal used too.  

Does anyone have experience discovering and mapping this sort of data?

Thank You

[SiD2]

Hi @Alex Becker,

I don't see any horizontal pattern for azure security group, may I know which pattern you refer to?

However you can do the "Migrate CAPI/CPG to Pattern" from nav menu and you'll get all the LP Cloud Patterns enabled and then "Azure - Security Group (LP)" pattern will discover the needful for you.

Please mark Helpful / Accept Solution so that it helps others with similar questions.

[Alex Becker]

Hello, 

Thank You for this, as this didn't directly give me a solution, since "Azure - Security Group(LP)" Doesn't discover Application Security Groups, just Network Security Groups.  I was thinking.  Why can't i create a new table called "application Security group", and create a new discovery pattern to discover the ASG and put them in the new ASG table.

Now I am having the an error that I don't really understand that I can hope to get help with.  I am receiving the error

2022-05-13 11:51:20: Exception occurred while executing operation Cloud REST - add response to context. Custom operation Failed to run script due to the following error: JAVASCRIPT_CODE_FAILURE: Cannot convert null to an object.. Custom operation Failed to run script due to the following error: JAVASCRIPT_CODE_FAILURE: Cannot convert null to an object.

has anyone seen this error and know how to fix it?

[SiD2]

Hi @Alex Becker,

Unfortunately the error doesn't point to any line no. You need to keep the debug logs in that custom operation to see why it doesn't work.

But I would like to ask one thing, how are you triggering this new ASG pattern?

[Alex Becker]

I can't figure out how to debug it.  

I have to publish the pattern, then i just manually trigger a cloud discovery.