Filter decommissioned CIs

Filter decommissioned configuration items (CIs) while running the CI lookup rules. To filter decommissioned CIs when running the Security Operations CMDB CI lookup rules, set the filterOutDecommissionedCI [**sn\_sec\_cmn.filterOutDecommissionedCI**] system property to true.

Before you begin

Role required: admin

About this task

The default value of the system property is true. This property is only applicable for CI lookup rules in Vulnerability Response and it does not impact the IRE lookup logic.

Procedure

1. Enter sys_properties.list in the left navigation bar.

2. Select Enter.

3. In the Search menu, under Name enter sn_sec_cmn.filterOutDecommissionedCI to filter the decommissioned CIs.

4. In the Value text box, enter the value true or false.

   The default value is true.

5. Select Update.

   This value is used by CI Lookup Rules during the next import. The sn_sec_cmn.filterOutDecommissionedCI system property filters out CIs that meet the conditions shown below while running the lookup rules.

   _isCIDecommissioned: function(gr, filterDecommissionCi) {
           var install_status = false;
           var life_cycle_stage_status = false;
           // check for property
           if (filterDecommissionCi == "true") {
               if (gr.isValidField("install_status"))
                   install_status = gr.install_status == 7;
               if (gr.isValidField("life_cycle_stage_status"))
                   life_cycle_stage_status = gr.life_cycle_stage_status == "Retired";
           }
           return install_status || life_cycle_stage_status;
   

Parent Topic:Create a Vulnerability Response CI lookup rule