Close records in bulk in the Vulnerability Manager Workspace

Close multiple records (VITs, AVITs, or CVITs) concurrently using the bulk edit feature in the Vulnerability Manager Workspace.

始める前に

Role required:

• sn_vul.vulnerability_analyst, or sn_vul.vulnerability_admin for host vulnerable items (VITs)
• sn_vul.app_sec_manager for application vulnerable items (AVITs)
• sn_vul_container.vulnerability_analyst or sn_vul_container.vulnerability_admin for container vulnerable items (CVITs)

手順

1. Navigate to Workspaces > Vulnerability Manager Workspace > List.
2. On the List page, open Active or All list in one of the following lists:
   • Host Vulnerable items
   • Container Vulnerable items
   • Application Vulnerable items
3. Perform one of the following:
   • Select the check box next to each item if you want to use the Only Selected Items option in the Record Selection field.
   • Apply filters if you want to use the All Vulnerable Items that match filter option in the Record Selection field.
4. Select the Bulk Edit button.
5. On the form, fill in the fields to close the selected records.

   表 : 1. Bulk Edit modal fields

   Field	Description
   Record Selection	Records to update. Choices are: Only Selected Items: Select this option if you want to update the records you selected using the check box. All Vulnerable Items that match filter: Select this option if you want to update the filtered records. Remediation Task: Select this option if you want to update the records in a remediation task and then select the desired remediation task in the Remediation task field. Vulnerability Entry: Select this option if you want to update the records specific to a common vulnerable entry (CVE) and then select the CVE in the Vulnerability Entry field. 注: Records with invalid CI or CI decommissioned aren’t updated. Only the records in the Open, Under Investigation, or Awaiting Implementation state are updated.
   State	Select the state as Closed.
   Reason	Reason for closing records: False Positive 注: When you select this option to mark the records as false- positive, the Reason, Short description, and Additional information fields appear. For more information on bulk edit for false positive, see Bulk edit for false positive in the Vulnerability Manager Workspace. Cancelled Fixed 注: The reasons, Cancelled and Fixed are not applicable to CVITs.
   Work notes	Text that you enter to describe the changes.

6. Click  Edit.

   A bulk edit asynchronous job updates the relevant records.