Vulnerable item detections with Empty/deleted Vulnerable Items

[Maloy Banerjee1]

Hi All,

I have integrated ServiceNow with Tenable.sc and have a list of vulnerable detections that don't have the Vulnerable Item field filled. It seems like, it was deleted. Can anyone suggest what the possible root cause could be?

Regards,

Maloy Banerjee

[dhanrajb]

Hi @Maloy Banerjee1 ,

Check whether Auto Flushes/Auto Delete Rules Enabled in your instance. That would have deleted the vulnerable items.

SN Docs Link: https://docs.servicenow.com/bundle/washingtondc-security-management/page/product/vulnerability-respo... 

Regards,

Dhanraj.

[Maloy Banerjee1]

Hi @dhanrajb ,

Thank you for your response. 

The auto-flush and auto-delete rules are both disabled for the instance.

Regards,

Maloy Banerjee

[dev101]

I am experiencing the same, did you get this resolved?

Thanks

[Eliz Skogquist]

If you have an auto flush (auto delete) rule in place, you'll want to have 'cascade delete' checked, to eliminate all records referencing this record.  That would remove the detections for the VI.  Same would need to be set-up in archiving, where you also archive related records (detections and m2m records).  At this point, you'll want to remove those from the system

, as they are no longer of value.