CI Lookup Rules

[tapasvi]

Hi Folks,

I am troubleshooting an issue where in i need to understand the CI mapping rules for VM Rapid & data import.

Issue - Rapid7 (Intsights VM) has scanned a asset with URL - xyz.com however when the VI got created it was created with IP address, Shouldn't it create the VI with URL name in CI field?

Do we have 1-1 mapping for CI under CI mapping rules or is it 1-many.

Example: If an Asset is scanned in Rapid7 with IP address then will it only search its match in the CMDB IP class or will it do a complete search in CMDB table.

I am assuming that even if i have 1 attribute (IP or FQDN or MAC or Hostname) in the scanned source data it should populate the related CI under VI table configuration field.

[Chris McDevitt]

Each integration (Source) runs its own matching rules. For example, only the Qualys CI matching rules run if it is a Qualys integration run. Each (Qualys) Lookup rule is considered in order until a Matching rule is found (based on Conditions).  If there is no match, then the data is passed to the IRE, which creates an incomplete IP address or unclassed hardware item depending on the available data.