SecurityInsight settings · Settings > Guards
CMDB table: empty asset collection
| Key | SI_Guard_CmdbSqlEmptySnapshot_Enabled |
|---|---|
| Where | Settings > Guards (safety checks) > CMDB, ServiceNow and asset metadata checks |
| Type | On / off |
| Default | Off |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
The safety check that protects the configuration items (CIs) in your SQL CMDB table: The newest asset collection holds no assets at all, so nothing was written or retired.
When enabled
the check works as described on the Guards page.
When disabled
the step goes on as if the check had not tripped -- an empty asset collection is written too, which can retire every CI.
Risk and how to reverse it
Turning this check off removes a protection: when its condition happens, nothing holds or stops the step and no event is raised. Reversible at once: switch it back on; it applies from the next run.
Requires
Works only while "All guards (safety checks)" is on.
Recommended
Keep the default (off) unless you want this check to hold or stop the step. Change it when: Off by default: only the two brakes stay on (CIs retired by mistake, duplicate vulnerability records) -- this check is a warning you can switch on. Turn it on when you want it to hold or stop the step, and mail, again.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack