How to link Discovered Items and CI

kuroiwa
Tera Contributor

Hello everyone.

The data integrated by the SecOps function initially searches the CMDB using lookup rules and identification rules.
If there is no CI as a result of the search, a record such as Unclass Hardware is created.
This created record is linked to the "Configuration Item" column of Discovered Items.


● What I want to confirm
When SecOps data is integrated for the second time or later, will the data in Discovered Items that already has Unclass Hardware CI associated be re-searched in the CMDB by LookUp rules or IRE?


I would appreciate it if you could let me know.
Thank you.

2 REPLIES 2

Community Alums
Not applicable

Hi @kuroiwa 

 

When SecOps data is integrated for the second time or later, will the data in Discovered Items that already has Unclass Hardware CI associated be re-searched in the CMDB by LookUp rules or IRE?

--> It will  re-search with Lookup rules as the record is already present cmdb_ci table.

 

Regards,

Sneha

Yamsanibhavani
Giga Guru

Hi @kuroiwa 

 

It will be re-searched using Lookup rules as it present in CMDB Table.

 

Mark my answer helpful if you find.

Thanks

Yamsani Bhavani