SecOps forum
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

Discovered Items - Best Practices for handling new devices

Hello everyone, Just wanted to see how everyone handles devices that get added into the CMDB as an Unclassed Hardware.   Looking to see how others are addressing the following situations: Undesired devices in the CMDB are classified as Unclassed Hard...

JGNYSTRS by Giga Contributor
  • 2259 Views
  • 2 replies
  • 1 helpfuls

Resolved! Qualys Integration runs are stuck in "Wait complete" state

Gentlemen, We are using Qualys Integration Module with our Now instance. Since the past cpl of weeks, all the Qualys integration runs are in a state "Wait complete" , even though the substate shows to be "success".   Any idea how to troubleshoot this...

find_real_file.png
Scorpion81 by Mega Expert
  • 3014 Views
  • 3 replies
  • 5 helpfuls

Resolved! What's the purpose of Auto-Close Stale Vulnerable Items ?

Could someone explain the purpose of the Auto-Close Stale Vulnerable Items feature? I thought this was a big win for me on 2 different issues: 1.) CI's that are Decommissioned and thus no longer able to be validated by Qualys as remediated.   2.) Vul...

Scott58 by Kilo Contributor
  • 2983 Views
  • 8 replies
  • 2 helpfuls

Resolved! Can CI lookup rules "find" Unclassed Hardware?

Good morning, I'm trying to understand if CI lookup rules can return an "Unclassed Hardware" item?   Here is the situation: - I have a vulnerability on "somehost.domain.com" - There is a matching CI in the CMDB, but is was just called "somehost" and ...

Christoph4 by Tera Contributor
  • 2227 Views
  • 4 replies
  • 0 helpfuls

Resolved! Reapply CI lookup rules UI action shows 0 records processed

Hello friends, While running UI action named - "Reapply CI Lookup Rules" on Unmatched Discovered Items, its not showing number of records processed. It shows as all counts as 0 such as Processed, 0Updated, etc. Does anyone have idea ? Thanks,Rahul

Resolved! Apply CI Lookup Rules to unmatched discovered items

Hi,  We have some discovered items which are unmatched but we noticed that they could be matched if we either update CI Lookup Rules or the unmatched CI itself. We know that we can reclassify a discovered item to some specific CI class which is good ...

Syed14 by Giga Guru
  • 4748 Views
  • 12 replies
  • 13 helpfuls

How to Allow Group Managers to Manage Group Members?

Dear All, Kindly note I've followed the below guide to give access to the group mangers to add/delete their own group members, but with no luck https://community.servicenow.com/community?id=community_question&sys_id=ed71cb29db98dbc01dcaf3231f961999 I...

find_real_file.png find_real_file.png find_real_file.png find_real_file.png
Yaseen2 by Mega Expert
  • 13284 Views
  • 14 replies
  • 3 helpfuls

Resolved! Splunk Sighting Search

HI, I am running Sighting search for IP Address in Splunk,i am using OOB "Sightings Search Configurations" and i have created same config in splunk as well but i am getting Sighting Search count as 0 in SNOW while in Splunk we are getting results for...

find_real_file.png
Apoorva12 by Giga Contributor
  • 2860 Views
  • 5 replies
  • 2 helpfuls

Resolved! Setting VIT/VUL to Closed/Deferred

Hi SecOps experts, I was just thinking if I set VIT/VUL to Closed/Deferred and if that vulnerability state changes to fixed in Qualys, does that change the state in ServiceNow to closed or fixed or will it be ignored? Wondering how state changes are ...

Khanna Ji by Tera Guru
  • 2965 Views
  • 15 replies
  • 3 helpfuls

Best Practice for removing inherited roles from groups??

"sys_user_has_role has entries that shouldn't exist" Years ago In our early stages of go-live, we had configured the itil role to be inherited when a user was granted the it_project_manager role. Recently, we removed the inherited role (itil) from it...

find_real_file.png find_real_file.png find_real_file.png
jennif by Giga Contributor
  • 6292 Views
  • 8 replies
  • 4 helpfuls