View and reclassify unmatched configuration items

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • Configuration items (CIs) that are not found in the Configuration Management Database (CMDB) are placed in a viewable list of discovered items. This list offers a convenient way to reclassify unmatched CIs.

    Before you begin

    Role required:

    sn_vul.read (minimum to view Unmatched CIs)

    and

    itil or asset (to reclassify)

    Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

    About this task

    As a Vulnerability Analyst you can view unmatched CIs.

    The reclassify action is available only on sn_sec_cmn_unmatched_ci class CIs, when you have either the itil or asset roles. Once a CI has been reclassified, it cannot be reclassified using the UI. You can reclassify, from the CI form or the CI list view, by changing the class value. For more information, see Reclassify a CI.

    Procedure

    1. Navigate to All > Security Operations > CMDB > Discovered Items.
    2. To review, click each item.
    3. To make corrections to the information in the Discovered Item form fields, edit in this page, and right-click Save.
      Any data added to or left in these fields is transferred to the resulting Configuration Item when it is reclassified.
    4. If everything looks correct, click Reclassify.
    5. From the choice list, select a Class Name and click Submit.
      The Discovered Item Class is updated, the State field is changed to Reclassified, and all data is in the CMDB.