Qualys Asset Inventory CMDB Sync. Error with "CMDB integration Pending Activation"

[Alexander Versh]

Hello all, I'm hoping to get some guidance from the experts here. I've been asked to enrich the data from Qualys assets into ServiceNow CMDB. We're using the Qualys CMDB Service Graph connector to do this. 1.3.1. I've set up connection together with Security team. The connection test is successful. I've then setup a schedule (as the PDF indicates). I didn't use any filters for devices.

When I execute the connection I receive this error and the source that I've just setup got set to "Inactive":

"API response:403 and response body:<assetDetailsResponse><responseMessage>CMDB integration Pending Activation</responseMessage><count>0</count><responseCode>SUCCESS</responseCode><lastSeenAssetId/><hasMore>0</hasMore><assetListData/></assetDetailsResponse>"

All the tags seem to be coming over from Qualys. Also, I believe that all the pre-requisites are installed in ServiceNow.

I cannot find much info on "CMDB integration Pending Activation". Is this a Qualys thing?

[Scott Halverso1]

To validate this is the response comign back from Qualys you could check the outbound HTTP Logs in ServiceNow found in the table (sys_outbound_http_log).  The request/response would only be here if this is a cloud to cloud integration.  Otherwise you have to search the ECC Queue if the rest call is being made from the MID Server to an on-Prem Qualys.

[Alexander Versh · Accepted solution]

I finally got a response from Qualys. This issue appears when required license is deactivated on Qualys side.

After they turned on trial license everything started working fine.

“Qualys CMDB Sync Service Graph Connector" is a part of the CSAM licensing and this would require an additional subscription.

[mohitmalik]

Hi Alex,

Hope you're doing well.

Your input related to license on Qualys side was very helpful and saved a lot of troubleshooting time. I'm still facing issue with CMDB population as Qualys is creating a duplicate CI and seems like it is not referring the IRE rule before populating CMDB table.

Based on the documentation I've considered all the pre-requisites as mentioned in docs.

1. Plugin "Configuration Management for Scoped Apps (com.snc.cmdb.scoped)" installation

2. Updated property - "How to add data in CMDB" to "Identification engine"

3. Added qualys as choice list of disocvery source

4. Updated reconciliation rules to prioritize ServiceNow as the discovery source

Is there somethin which I'm missing to make sure IRE rules are referred before Qualys creates/updates a CI in the CMDB tables?

Thank you