Deduplicate Rapid7 Vulnerability Integration data warehouse records

When migrating to the InsightVM integration type from the Data Warehouse integration type, you can deduplicate existing data warehouse vulnerable items as long as they belong to the same source data as your Rapid7 InsightVM data.

시작하기 전에

Role required: sn_vul_r7.admin or, sn_vul.vulnerability_admin or sn_vul.admin (deprecated)

Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

이 태스크 정보

This deduplication only works when migrating from the Rapid7 Nexpose data warehouse to the Rapid7 InsightVM Vulnerable Item integration.

프로시저

1. Navigate to All > Rapid 7 > Integrations.
2. Set all Rapid7 Nexpose data warehouse integrations Active column settings to False, disabling the integrations.
3. Enter sys_properties.list in the left navigation panel.
4. Search for the Name: sn_vul_r7.deduplicate_DW_vulnerable_item.
5. Change the Value field to True.
   
6. Click the green checkmark icon .
   During the next Rapid7 InsightVM vulnerable item integration import, any match with existing data warehouse records prevents a duplicate vulnerable item from being created.