where are discovery pattern step scripts stored
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-09-2024 12:51 PM - edited 09-09-2024 12:57 PM
We are implementing ITOM Visibility. There are steps that require elevated privileges on the discovery target and those are called out well on this document. Service Mapping commands requiring a privileged user (servicenow.com)
While that does tell you, per platform type WHAT commands are used that will require elevated privileges but it cannot really get into WHERE those calls are being made so that the affected team can evaluate the risk and need for each call. There could literally be hundreds of calls across dozens of discovery patterns.
The question: Is there a way to query all of the steps for each of the commands that require elevated rights?
In the pattern designer, you can search for terms (see screenshot) but I have not found a way to use regex to keep from triggering on every try/catch for CAT for example.
Understandable from the solution owners perspective. They want to know what you are reading with CAT and SUDO rights. You could literally read any file on any server. The flip side, our service mapping is in peril unless we can resolve their concerns.
- Labels:
-
Discovery
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-18-2024 02:14 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-18-2024 01:38 PM
It was certainly worth a look. That table is empty in the our environment but I will keep and eye on it. I suspect as we do extensions to patterns, we'll see that populate. Thanks for bringing it to my attention.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-19-2024 01:03 AM
I think you shoudl have "Pattern Designer Enhancement" plugin installed.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-18-2024 01:56 PM
this one also looked interesting.. https://xxxx.service-now.com/sa_mapping_ext_commands_list.do?sysparm_clear_stack=true