--- sourceDocument: Australia IT Operations Management sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # Amazon VPC Flow Log # Amazon VPC Flow Log pattern-based discovery {#ariaid-title1} Release version: Australia Updated May 13, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Amazon VPC Flow Log pattern-based discovery The Amazon VPC Flow Log pattern-based discovery in ServiceNow enables automated detection and inventory of Amazon Virtual Private Cloud (VPC) Flow Logs within your AWS cloud environment. This discovery is part of the Discovery and Service Mapping Patterns application, which populates detailed data about VPC Flow Logs into both CMDB and non-CMDB tables, helping you maintain accurate cloud resource visibility. Show full answer Show less ## Key Features * **Pattern Activation:** The VPC Flow Log discovery pattern is disabled by default. Starting with Visibility Content 6.28.0, activating or deactivating patterns no longer counts as a customization, ensuring patterns receive updates and reset to the latest version after upgrades while preserving activation state. * **Prerequisites:** Ensure AWS discovery prerequisites are met and that relevant VPC Flow Log resources are not listed in the Resource Inclusion List \[sacloudinventoryresourcewhitelist\] to prevent duplicate discoveries. * **Data Population:** The pattern populates data in: * *Non-CMDB Tables:* Data is stored when running the Amazon AWS - VPC Flow Log - Extended Inventory (LP) pattern, accessible via the Configuration \> AWS navigation. * *CMDB Tables:* Key resource details such as name, object ID, resource type, install and operational status are stored in the Cloud Resource \[cmdbcicmpresource\] table. * **CI Relationships and References:** The pattern establishes relationships such as the Cloud Resource hosting AWS Datacenter and references between VPC Flow Log records and corresponding Cloud Resources, supporting comprehensive mapping. * **Tag Collection:** AWS tags associated with VPC Flow Logs are collected and stored in the Key Value \[cmdbkeyvalue\] table linked to the Cloud Resource records. ## What You Can Expect After enabling and running the Amazon AWS - VPC Flow Log - Extended Inventory (LP) pattern, you will have an up-to-date inventory of VPC Flow Logs, including their operational status, delivery status, and associated AWS tags, reflected accurately in your CMDB and related tables. This enhances cloud resource management, supports impact analysis, and improves visibility into your AWS network flow logging setup. Discovery and Service Mapping Patterns finds Amazon Virtual Private Cloud (Amazon VPC) Flow Logs on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store. ## Pattern-based discovery and mapping requirements {#aws-vpc-flow-log__section_rpj_fj2_bgc} Verify the AWS discovery prerequisites : For more information, see the prerequisites section in [AWS discovery using patterns](https://www.servicenow.com/docs/NFaTlkGaSxMWb2bQPsCnCA "Discovery and Service Mapping Patterns uses patterns to discover components of the Amazon AWS Cloud deployment during horizontal discovery. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store."). Remove resources from the Resource Inclusion List table : Verify that the relevant resource isn't listed in the Resource Inclusion List \[sa_cloud_inventory_resource_whitelist\] table to avoid duplicate discovery. For more information on removing resources from the Resource Inclusion List, see [AWS Resource Inventory discovery with Patterns](https://www.servicenow.com/docs/0pDNq0441mpy~sExfQvvqA "The ServiceNow Discovery and Service Mapping applications can find and map the AWS resources available by AWS Config Service. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store."). Enable the relevant pattern : The pattern for this service is disabled by default. Starting with Visibility Content version 6.28.0, activating or deactivating a pattern won't be considered a customization, and it will continue to receive updates. Patterns that were previously activated or deactivated will reset to the latest predefined version after upgrading while retaining the last active field value. For more information on enabling patterns, see [Activate a disabled pattern](https://www.servicenow.com/docs/aypCYVQdO8oFebLMLEI89g "If you want to use a pattern for discovery that's disabled by default, activate it manually.").{#aws-vpc-flow-log__activating-disabled-pattern-not-customization} Discovery and Service Mapping Patterns application populates data in both CMDB and non-CMDB tables. ## Data stored in non-CMDB tables {#aws-vpc-flow-log__section_aq4_qkq_hfc} Discovery and Service Mapping Patterns application populates data in the non-CMDB table when running the Amazon AWS - VPC Flow Log - Extended Inventory (LP) pattern. You can review the non-CMDB AWS tables by navigating to AllConfigurationAWS. You can also search the navigation filter for the specific pattern name. {#aws-vpc-flow-log__table_non_cmdb__entry__2} | Field | Description | |-|-| | Name \[name\] | The flow log ID, used as the display name. | | Object ID \[object_id\] | The unique identifier of the flow log. | | Resource ID \[resource_id\] | The ID of the resource associated with the flow log, such as a VPC, subnet, or network interface. | | Deliver Logs Status \[deliver_logs_status\] | The status of the log delivery. The value is SUCCESS or FAILED. | | Flow Log Status \[flow_log_status\] | The status of the flow log. The value is ACTIVE when the flow log is running. | | Configuration Item \[configuration_item\] | References the Cloud Resource \[cmdb_ci_cmp_resource\] table. | [Table 1. AWS VPC Flow Log \[cmdb_aws_vpc_flow_log\]] {#aws-vpc-flow-log__table_non_cmdb} ## Data stored in CMDB tables {#aws-vpc-flow-log__section_ggp_ql2_bgc} Discovery and Service Mapping Patterns application populates data in the CMDB when running the Amazon AWS - VPC Flow Log - Extended Inventory (LP) pattern. {#aws-vpc-flow-log__table_cmdb__entry__2} | Field | Description | |-|-| | Name \[name\] | The flow log ID, used as the display name. | | Object ID \[object_id\] | The unique identifier of the flow log. | | Resource type \[resource_type\] | Type of resource. The value is set to AWS::VPC::FlowLog. | | Install Status \[install_status\] | Install status of the resource. Default value is Installed. | | Operational status \[operational_status\] | Operational status of the resource. Default value is Operational. | [Table 2. Cloud Resource \[cmdb_ci_cmp_resource\]] {#aws-vpc-flow-log__table_cmdb} ## CI relationships {#aws-vpc-flow-log__section_dc4_ghc_dgc} The Amazon AWS - VPC Flow Log - Extended Inventory (LP) pattern creates the following relationships and references to support Amazon VPC Flow Log discovery. References link to records in other tables and don't appear in the CI Relationship \[cmdb_rel_ci\] table. {#aws-vpc-flow-log__table_relationships__entry__3} | CI | Relationship | CI | |-|-|-| | Cloud Resource \[cmdb_ci_cmp_resource\] | Hosted on::Hosts | AWS Datacenter \[cmdb_ci_aws_datacenter\] | [Table 3. CI relationships] {#aws-vpc-flow-log__table_relationships} {#aws-vpc-flow-log__table_ci_references__entry__3} | CI | Field | Referenced CI | |-|-|-| | AWS VPC Flow Log \[cmdb_aws_vpc_flow_log\] | Configuration Item \[configuration_item\] | Cloud Resource \[cmdb_ci_cmp_resource\] | | Key Value \[cmdb_key_value\] | Configuration item \[configuration_item\] | Cloud Resource \[cmdb_ci_cmp_resource\] | [Table 4. CI references] {#aws-vpc-flow-log__table_ci_references} ## AWS Tag discovery {#aws-vpc-flow-log__section_lyw_zhc_dgc} The Amazon AWS - VPC Flow Log - Extended Inventory (LP) pattern collects tags and populates them in the Key Value \[cmdb_key_value\] table. {#aws-vpc-flow-log__table_ojy_vss_5hc__entry__2} | Field | Description | |-|-| | Key \[key\] | Tag name. | | Value \[value\] | Tag value. | | Configuration item \[configuration_item\] | References the Cloud Resource \[cmdb_ci_cmp_resource\] table. | [Table 5. Key Value \[cmdb_key_value\]] {#aws-vpc-flow-log__table_ojy_vss_5hc} *[\>]: and then