Reapply CI lookup rules on selected discovered items

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • Reapply the configuration item (CI) lookup rules on selected discovered items from the discovered item list view select actions. If the CI changes after you reapply the rules, the discovered items are updated with the new CI and impacted detections. Vulnerable items are also updated.

    Before you begin

    Roles required: admin

    About this task

    For more information, see CI changes for discovered items.

    For more information about the concepts of CI matching and the CMDB, discovered item lookup, rule-based identification, and other detailed information about how CI matching works, see the CI matching in Vulnerability Response [KB0998706] article in the HI Knowledge Base.

    Procedure

    1. Navigate to All > Security operations > CMDB > Discovered Items.
    2. Select the required discovered items and click Action on selected rows.
      Reapply CI lookup rules on Discovered Items.
    3. From the list, select Reapply CI lookup rules.
      Note:

      Starting with Vulnerability Response v24.0.6, you can skip the reapplication of CI lookup rules on discovered items with the substate ‘CI Decommissioned’ by enabling the system property sn_sec_cmn.skipItemsWithCIDecommissioned.

      The rules are reapplied on these discovered items.

    4. Click View status in the message.

      The status displays on the background job form.

      Note:
      In the Notes field, the Discovered items could not be process due to exception attribute with a non-zero value indicates that there is an error or exception while reapplying a CI look up rule. Check the system logs for more details.
    5. Reapply only applies to items scanned within the last 90 days based on the last_scan_date, last_comp_scan_date, non_infra_last_scan_date, non_infra_last_comp_scan_date column.

      Added ci_lifecycle_status_source (scope = sn_sec_cmn) system property for configuring Ci lifecycle status columns (e.g., Install Status, Operational Status). You can configure additional columns for retiring CIs.

      Columns are added to the background job list view:
      • Elapsed Time(ms): The time required for processing the background job.
      • Items Processed: The number of items processed till now.
      • Total Items to be Processed: The total number of items remaining to be processed.
      • Time Until Completion(ms): The time remaining until the background job is processed. These columns provide visibility into job progress, these columns are available for each form view for you to add as per requirement.