Hi,
We have some VIT records, where the DNS and CI name are different and when we try to apply the CI lookup rules, it doesn't get applied for those records since the Discovered items are CI Decommissioned and basically lookup rules do not apply on the CI Decommissioned records. Using the Auto-close rules, we are closing out the VITs and detections, whose Discovered item state is CI Decommissioned. When the same vulnerability is detected by Qualys scanner again and if the VIT is re-opened, why is the CI/ discovered item not getting updated on that VIT to match with the correct CI ? And due to this even though we have the correct CI in CMDB, we are unable to attach it to the VIT. Can anyone help with this scenario and any better suggestion would behelpful.
