Generate a Pattern allowlist

Generate an allowlist for a selection of patterns, to configure the patterns permitted to run on an agent.

Before you begin

Ensure that the following plugins are installed on your instance:

• Discovery (com.snc.discovery)
• Pattern Designer Enhancements (com.sn_itom_pde)

Role required: discovery_admin or agent_client_collector_admin

Procedure

1. Navigate to All > Pattern Designer > Patterns allowlist for ACC.
   The Pattern Allowlist Generator page appears.
2. Select the type of pattern selection in the Pattern Selection section.
   • All patterns: The allowlist generates for all patterns on the agent.
   • Specific patterns: The allowlist generates on the agent only for the patterns you select.

     After selecting this option, choose the patterns from which you want the allowlist to be generated.

3. Select Generate Allowlist.
4. Select Copy to copy the generated allowlist.
5. Append the copied allowlist into the existing check-allow-list.json allowlist on the agent.

   The patterns specified in the allowlist are permitted to run on the agent.

   The allowlist's default location is:

   • Windows: C:\ProgramData\ServiceNow\Agent Client Collector\check-allow-list.json
   • Linux: /etc/servicenow/agent-client-collector/check-allow-list.json

   Note:

   To generate allowlist for commands nested within EVAL() in a pattern step, ensure the Pattern Designer Enhancements plugin is v3.9.1 or above.