Auto-promote CIs

Edit the JSON string in the autoPromoteFields [sn_sec_cmn.autoPromoteFields] system property so your configuration item (CI) lookup rules auto-promote all the Security Operations CMDB CIs to matching entries in the [cmdb_ci] table.

Before you begin

Role required: sn_vul.vulnerability_admin

About this task

The system property type is ’string’ and requires you enter a JSON string. This property is activated by default and promotes matching CIs while running the CI lookup rules.

Custom-written lookup scripts might return child table records from the script. For this property, the _autoPromoteCI function in the CIIdentify Script Include takes the CI returned by the lookup script and automatically traverses the relationships to arrive at the cmdb_ci entry and return it.

To override the auto-promotion logic, that is, to add or update new CI classes, add the JSON object in the Value field in the [sn_sec_cmn.autoPromoteFields] system property.

Procedure

1. Enter sys_properties.list in the left navigation bar.
2. Select Enter.
3. Locate the [sn_sec_cmn.autoPromoteFields] system property and select the record to open it.

   Default string:

   {
    "dscy_switchport":"cmdb_ci",
    "cmdb_ci_network_adapter":"cmdb_ci",
    "cmdb_ci_nic":"cmdb_ci",
    "cmdb_ci_ip_address":"nic"
   }

4. In the Value text box, edit the string using the default pairing format.
5. Select Update.
   This value is used by CI Lookup Rules during the next import.