Vulnerability Response Auto-Close rule getting error for no active integrations when running job.

[dan167]

Hello everyone,

I am in the process of setting up an auto-close rule for stale vulnerable items in our VR module. I have the rule conditions looking for vulnerable item . last found is relative before 1 day ago. When I run the job "Auto-close Rule Processor" I get an error in logs saying "No active integration instance found for the auto-close rule : 663d7cb015608210f8774ae7518bd551 Hence, the scheduled job will not close any items.". I have an integration setup from Tanium to ServiceNow to import VITs. Has anyone ran across this error? Not finding much with my googlins.

[Nitesh Tolani]

Can you check if the integration instance (record in sn_sec_int_impl) for Tanium is active or not?

The system expects the integration instance to be active in order for the items to close.

[dan167]

Yes it is active and integration is working.

[dan167 · Accepted solution]

For this apparently the OOB auto close rules do not work with the Tanium integration per ServiceNow