Rule Synopsis
These are the rule/s that control the value used as the Discovery Source on each CMDB CI record.
Rule Details
-
CI Sync sets the Discovery Source attribute on newly inserted CIs to equal “defender_cloudapps” (for the value as distinct from the sys_choice label).
Override Options
Context
Customers may consider overriding the default rule to set a different Discovery Source value to meet their specific ServiceNow requirements.
The use of the Discovery Source value can be important when multiple separate MS Defender for Endpoint instances are being synced to a single destination ServiceNow CMDB. Customers may want to use a unique Discovery Source for each individual MS Defender for Cloud Apps instance.
Options
-
The rule can be amended to use another value as the Discovery Source during an Insert CI Opertion.
Overriding via Connection Settings
Customers can perform the override using a “Connection Setting” via the CI Sync User Interface (i.e. customers can perform the overrides themselves). Additional information for this is available via the following documentation:
-
For a general overview of CI Sync Connection Settings please read Understanding the use of CI Sync Connection Settings.
-
For the specific CI Sync Connection Setting/s related to the rule described on this page please read Correlation Fields for Defender for Cloud Apps
For documentation on all CI Sync Connection Settings please visit the page tree Connection Setting Guides.
Additional Information
N/A
Related Rules
Support Model for Rule Overrides
Question: Can overrides be performed by customers without a Syncfish Extended Implementation and Support Plan?
Answer: Yes (via self-service in the CI Sync UI)
Question: Which Syncfish Extended Implementation and Support Plan is required to obtain overrides of this rule
Answer: Either a Bronze Plan, Silver Plan or Gold Plan (for customers wanting Syncfish assistance to perform overrides of this rule)