Find CI
For unmatched CI, you can find the CI availability by using the ServiceNow functionality - Identification and Reconciliation Engine (IRE).
The Identification and Reconciliation Engine (IRE) tries to find the associated CI based on other matching criteria, such as Host Name, DNS Name, FQDN, Domain, IP address, Serial Number and Netbios.
To find the associated CI, open an unmatched CI record and click Find CI.
If any parameter matches the corresponding values in CMDB, the Configuration item field is automatically populated. Click Update to update the record.
To find the CI, a script is used that is available under System Definition - Script Includes - QualysAssetIRE.
IRE CMDB_CI_hardware cirteria: (Script Includes, under System Definition & look for QualysAssetIREvar ireData = {
items: [{
className: "cmdb_ci_hardware",
values: {
os: host.getValue('operating_system') || undefined,
name: host.getValue('name') || undefined,
asset_tag: host.getValue('asset_id') || undefined,
dns_domain: host.getValue('domain') || undefined,
fqdn: host.getValue('fqdn') || undefined,
ip_address: host.getValue('ip_address') || undefined,
serial_number: host.getValue('serial_number') || undefined,
}
}]
};
You can modify the IRE parameters and the script with additional parameters if you have the required privileges.
Ensure that you have defined the Hardware Rule in the Identification and Reconciliation Engine, and the criteria to be matched are set to true.
To check the hardware rule, go to Identification/ Reconciliation > CI Identifiers > Hardware Rule.
- The CI matching can be enhanced with the Qualys CMDB Sync app, which is available on the ServiceNow store and is part of Qualys Cyber Security Asset Management (CSAM).
- When integrated with the CMDB Sync app, the application uses Configuration Item (CI) matching to accurately associate vulnerabilities with the correct assets, achieving a near 100% match rate. Any unmatched assets can be addressed through a built-in workflow, improving both the efficiency and accuracy of vulnerability management.
For more information on the app, contact your Qualys representative.