Discovered Items

Assets are automatically matched to configuration items (CIs) in the Configuration Management Database (CMDB) when they are imported using CI Lookup Rules. Discovered Items give you visibility into how asset identification is mapped to CIs in the CMDB.

Discovered Items are considered Matched, Unmatched, or Reclassified. Identified CIs are in the Matched state.

To make it easier to find potential matching issues, the CI Lookup Rule that matched the CI appears in the CI matching rule field.

By default, the Security Operations > CMDB > Discovered Items module lists unmatched configuration items. You can view all discovered items from an import by removing the filter.

For a description of the fields in Discovered Items, see Discovered Items form fields. For more information on reconciling unmatched discovered items and reapplying CI lookup rules on selected discovered items, see Reconcile unmatched discovered items and Reapply CI lookup rules on selected discovered items respectively.

• CI changes for discovered items
  When a configuration item (CI) on a discovered item (DI) changes, the impacted detections and vulnerable items (VIs) are updated. The risk score, assignment rules, group rules, and remediation target rule are reevaluated.
• Re-evaluating discovered items
  When new data is received on a discovered item, the discovered item is not immediately re-evaluated. On receiving new data, the reevaluate_ci option is set to true by default.

Parent Topic:Vulnerability Response