Forum Posts
Resolved! Is container VR a prereq to updating to the new ServiceNow developed WIZ integration?
We already have the WIZ developed integration installed and running, and want to update to the ServiceNow developed integration but I am confused whether container vulnerability response is a prerequisite. We are not currently licensed for Container ...
Knowledge base for SIR workspace
Hallo forum, I have currently implement Knowledge base link into the SIR workspace so that an Analysts can create new articles directly from workspace list as well. How do i get the modal working in SIR workspace for knowledge base category picker?Do...
security incident response
HI all,I have one issue related to SIR where the duplicate record are getting generated in SIR it is reported by the user that the 1st incident which is original and he is using the SIR analyst workspace and seen that the the same duplicated incide...
Remediation target is being set to 'Target Missed' for vulnerable items even the state is deferred
Remediation target is being set to 'Target Missed' for vulnerable items even the state is deferred and remediation target is not passed the current date.Can anyone assist?
Scheduled Reports with sn_vul_vulnerability table returning empty - ACL Issue?
EnvironmentServiceNow Instance with Vulnerability Response moduleUser has roles: sn_vul.admin, report_admin, report_user, and other VR-related rolesIssue DescriptionI'm experiencing an issue where scheduled reports that include data from the sn_vul_v...
Lookup Rule Suggestions
Hello, I’m reaching out to gather insights from the community on best practices for defining lookup rules in the Discovered Items table. What rules have you found most effective, or what strategies do you recommend to ensure accurate matching between...
Best practices for handling unmatched fallback CIs (unclassed hardware & incomplete IP ...)
I’m working with a client that uses Rapid7 and Microsoft TVM with ServiceNow VR. A large percentage of discovered items remain unmatched, so VR creates many fallback CIs (Unclassed Hardware / Incomplete IP Identified Device).We need clarity on what h...
Qualys Integration Runs have inconsistent data
Hello.I have a question to VR Qualys experts. We have encountered an issue where the Qualys Integration "Qualys Host Detection Integration" Reports Different data for Both "New items or Updated Items" These are successful and complete scan runs. But ...
Qualys Host detection Detection integration.
Hello All, I have discrepancies in data ingested to ServiceNow from Qualys. A complete/successful run scan is generating different data for both New items and updated Items. How can i troubleshoot this to know exactly what is wrong. Could this have ...
Qualys passing ephemeral data through Resource ID field
Hey everyone, I hope you're well. I'm reasonably new to the Security Operations side of ServiceNow so apologies if some of these questions seem reasonably straight forward. I've been working with our IT Security team to improve the VR experience in S...
Creating remediation tasks so new VIs are not added to existing/active RTs
Hello,We have the VR integration with Tenable.io. We use remediation target rules to set SLAs and task rules to group VIs together by CI support group. The problem we have is that new VIs are being added to existing/open Remediation Tasks that have a...
Resolved! CVIT Bulk Edit
Hello,Is there a suggested workflow/practice for bulk editing Container Vulnerable Items? There is a "Bulk Edit" feature for host VITs in Vulnerability Response, however I don't see one in CVR, nor do I see any documentation on the subject. We are ...
Resolved! Need to add additional reference fields on Modal in UI builder
Hi, 1. On security incident record in security incident response workspace when we click on "create incident", a modal pops up. In this we want to add "assignment group" reference field with list similar to available on incident table. We found a re...
Exception Rules no longer provide option to execute on existing data
I'm running ServiceNow Vulnerability Response 26.0.11. There were recent changes to VR and now exception rules no longer create remediation task to track VITs that are deferred; but I also noticed I no longer have the option when creating the excepti...