Restrict Qualys Creating CI's in Unclassed Hardware
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-15-2023 05:20 AM
How to Restrict Qualys Creating CI's in Unclassed Hardware, we have a requirement to partially stop creating the CI in Unclassed. is there a way to disable?
Thanks in advance
Ram
- Labels:
-
Vulnerability Response
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-15-2023 06:34 AM
Hi Ram, I used a combination of the Schedule API Filter and the Class Mappings to trim and filter the data so it only brings in the records I require and for those records I ensure the target class is set.
For example my API filter only allows Windows Computers of the category Note Book and Desktop...
operatingSystem:"Windows" and (hardware.category: Computers / Desktop or hardware.category:Computers / Notebook)
Additionally in the Hardware CI mappings I have disabled all CI classes expect computers and those have been set with a target class of cmdb_ci_computer.
This way I avoid any unwanted device types and direct the ones I do want into the correct CI class.
Hope this helps?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-15-2023 10:38 AM
Hi Nelson, Thank so much for you response.
Is there a way we can completely stop created the CI's in CMDB. not just partially.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-22-2024 10:08 PM
Hi @RamSagar
we can do this by disabling the below System property:
"sn_sec_cmn.ci_creation_through_IRE"
……………………………………………………………………………………………………
Please Mark it helpful 👍and Accept Solution✔️!! If this helps you to understand.