SecurityInsight settings · Settings > Guards
CMDB hand-off: large change
| Key | SI_Guard_CmdbHandoffMassChange_Enabled |
|---|---|
| Where | Settings > Guards (safety checks) > CMDB, ServiceNow and asset metadata checks |
| Type | On / off |
| Default | On |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
The safety check that protects the CIs your ServiceNow imports from the CMDB hand-off database: Far more of the CIs handed to ServiceNow last time are missing from this run than the connector allows, which looks like a broken collection rather than assets gone, so this run's batch was held and ServiceNow keeps importing the previous one.
When enabled
the check works as described on the Guards page.
When disabled
the step goes on as if the check had not tripped -- the batch is handed over to ServiceNow however many CIs changed or disappeared.
Risk and how to reverse it
Turning this check off removes a protection: when its condition happens, nothing holds or stops the step and no event is raised. Reversible at once: switch it back on; it applies from the next run.
Requires
Works only while "All guards (safety checks)" is on.
Recommended
Keep it on. Change it when: Leave it on. Turn it off only when this check keeps stopping work you know is right -- read what Off means first.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack