Close UI Action in Vulnerability Response

[User205031]

Hi All,

When I'm closing Vulnerable Item  I have two option for closure:

• Wait for confirmation from next scan 
• Close vulnerabilities now, reopen if found

I need to know if I select any one of the 'Close Now?' options, in ServiceNow, in which field the value of 'Close Now' is stored?

Thanks!

[Martin Dewit]

The field that is used is not stored anywhere on the record itself. If you look into the code behind the Close UI Action and the UI Page that it uses, you can see that there are values that are passed through other scripts dictating the state. The radio button for wait vs no wait is resolved vs closed. So if you wait it sets state to Resolved and waits for the scanner to reopen or close. If you close now it sets state to Closed, but if the scanner still finds it it will reopen it.

[Hetang Modi]

Do you happen to have the official documentation for this?

[Martin Dewit]

My first reply is not specifically mentioned in any documentation, but the behavior is described here in the docs.