question Re: How to restrict creation or updation of Software installations through discovery in CMDB forum

How to restrict creation or updation of Software installations through discovery

Dharani7 — Wed, 17 Sep 2025 10:14:32 GMT

Hii All,

We have a requirement to restrict insertion or updation of software installations in cmdb_sam_sw_install table through discovery for servers, since we want this to be updated via tanium only . What will be the best approach to disable it through discovery .

I have disabled software filter for both unix and windows under discovery configuration console , but still insertion is happening. Not able to restrict it through IRE since it is not visible in class manager.

Can anyone suggest the best approach on this ?

Re: How to restrict creation or updation of Software installations through discovery

SP22 — Wed, 17 Sep 2025 11:20:05 GMT

Hello @Dharani7 ,

Could you please find the below video and let me know if it is useful or not.

https://www.youtube.com/watch?v=HQJG51qcd9U

Thanks
Santosh.p

Re: How to restrict creation or updation of Software installations through discovery

Dharani7 — Wed, 17 Sep 2025 11:47:52 GMT

Hii @SP22 ,

Thank you for the reply ,

This video is not helpful , if we enable restricted software field for software models, software installations will be deleted . But we need software installations to created or updated from Tanium . Just want to know is there any way to restrict ServiceNow discovery from capturing software installations and its updation in CMDB.

Re: How to restrict creation or updation of Software installations through discovery

SP22 — Wed, 17 Sep 2025 12:18:34 GMT

Hello @Dharani7,

Configure Identification and Reconciliation Rules (IRE):

Purpose: Ensure only Tanium can update software CIs.

step by step gudience:

Navigate to:
Configuration > CI Class Manager
Search for Software CI Class:
For example, cmdb_ci_spkg.
Open the Class:
Click on the class name.
Go to Reconciliation Rules:
- Click the Reconciliation Rules tab.
- Review existing rules.
Edit/Create Rule:
- Set Tanium as the preferred data source for relevant attributes (e.g., version, installation date).
- Set Discovery as a lower priority or exclude it from updating these attributes.
Save the Rule.

Re: How to restrict creation or updation of Software installations through discovery

Dharani7 — Wed, 17 Sep 2025 13:19:41 GMT

Hii @SP22 ,

Software installation[cmdb_sam_sw_install] table is not available under CI class manager , since it is not extending cmdb_ci class so reconciliation rule cannot be applied on it.

Re: How to restrict creation or updation of Software installations through discovery

Vijaya_Mnpram — Wed, 17 Sep 2025 16:45:23 GMT

@Dharani7 If the software installations are updated with Patterns from Discovery, find those patterns and disable them.

Try running discovery for one server and then you can easily find the pattern in the discovery logs.

Is tanium is updating this table through API?