SecurityInsight settings · Settings > Connectors & CMDB
Full asset metadata: allowed change between runs
| Key | SI_AssetProperties_ChangeGuardPercent |
|---|---|
| Where | Settings > Connectors & CMDB > Asset properties |
| Type | int |
| Default | 10 % |
| Edition | pro |
What it does
How much the full asset metadata collected from one source may change from one run to the next before the hand-off of that source is held.
When set
When a source (for example Defender, Entra or Azure) returns more than this share more or fewer objects than in the previous run, the previous collection of that source is kept for the CMDB and vulnerability hand-off, and a guard event is raised (mail and Operations > Guards (safety checks)). The hold ends by itself on the next run that is back within the limit, or once when an Admin releases it.
When blank or default
Left blank, the default applies: 10 %
Risk and how to reverse it
Affects what SecurityInsight writes to your CMDB or ticketing systems. Reversible for future runs, but changes already written there stay; the connector's own guards hold large or unsafe changes.
Requires
A SecurityInsight Pro licence.
Recommended
Keep the default. Change it when: Raise it if your estate legitimately changes a lot between runs; lower it to be warned of smaller changes.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack