Find CI
For unmatched CI, you can find the CI availability by using the ServiceNow functionality - Identification and Reconciliation Engine (IRE).
The Identification and Reconciliation Engine (IRE) tries to find the associated CI based on other matching criteria, such as Host Name, DNS Name, FQDN, Domain, IP address, Serial Number, and Netbios.
To find the associated CI, open an unmatched CI record and click Find CI.
If any parameter matches the corresponding values in CMDB, the Configuration item field is automatically populated. Click Update to update the record.
To find the CI, a script is used that is available under System Definition - Script Includes - QualysAssetIRE.
IRE CMDB_CI_hardware cirteria: (Script Includes, under System Definition & look for QualysAssetIREvar ireData = {
items: [{
className: "cmdb_ci_hardware",
values: {
os: host.getValue('operating_system') || undefined,
name: host.getValue('name') || undefined,
asset_tag: host.getValue('asset_id') || undefined,
dns_domain: host.getValue('domain') || undefined,
fqdn: host.getValue('fqdn') || undefined,
ip_address: host.getValue('ip_address') || undefined,
serial_number: host.getValue('serial_number') || undefined,
}
}]
};
You can modify the IRE parameters and the script with additional parameters if you have the required privileges.
Ensure that you have defined the Hardware Rule in the Identification and Reconciliation Engine and the criteria to be matched are set to true.
To check the hardware rule, go to Identification/ Reconciliation > CI Identifiers > Hardware Rule.
- The CI matching can be enhanced with the Qualys CMDB Sync app available on the ServiceNow store. The Qualys CMDB Sync app is part of Qualys CyberSecurity Asset Management (CSAM). For more information on Qualys CMDB Sync app, contact your Qualys representative.
- When paired with CMDB Sync, the app leverages CI matches to accurately map vulnerabilities to corresponding assets, achieving close to a 100% match rate. Unmatched assets can later be resolved via a built-in workflow, further enhancing efficiency and accuracy in vulnerability management.