Issue with CI Look up rules in vulnerability response

Amarnadh
Tera Contributor

We have multiple CI look up rules in our instance in place. But the problem is if we have multiple CI's with same IP or some source field for a cloud Management agent class and Linux Server class then Discovered item is getting created for Cloud Management event though resource tag says linux server. Can some one suggest how to correct this issue or suggest some best methods to fix common issues.

 

1 REPLY 1

Tanushree Maiti
Tera Patron

Hi @Amarnadh 

 

refer this post : https://www.servicenow.com/community/secops-forum/vulnerability-response-creating-ci-s-of-multiple-c...

 

 

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti