Can we switch from ci lookup rule to IRE for CI identification for Qualys integration?

[Ravish Shetty]

Hi all,

We have Qualys integration to create vulnerabilities against CI's and the integration also creates CI in the CMDB which are not present.

We were considering switching this to IRE. Is it possible out of box without any customisations?

Thanks,

Ravish

[Eliz Skogquist · Accepted solution]

Hi Ravish,
The process for ingestion runs CI Lookup rules, and if a match isn't found runs through IRE rules to see if it can find a match with them.  So, IRE is already in play.  No customization required.

Elizabeth

[Ravish Shetty]

Okay thank you Elizabeth.