Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.

Configure the scheduled job for updating NVD records

Log in to subscribe to topics and get notified when content changes.

Configure the scheduled job for updating NVD records

Identify the repositories that you want updated regularly. You can execute a scheduled job to update National Vulnerability Database (NVD) records on a nightly or weekly basis.

Before you begin

The NVD runs as a scheduled job weekly on Mondays at 01:00:00. This scheduled job is enabled by default, however if Auto-update, for each repository, is not set, an import is not initiated.
Note: If you receive a 'server overload' error for an NVD download, reset your time for 15 minutes, before or after 1:00:00 to avoid traffic on the NVD website.

NVD vulnerability imports download JSON files, instead of XML, in anticipation of the switch to JSON by NVD. The JSON download contains the CVSS3 data. CVSS3 data is not available prior to 2015.

If the NVD data feed you want to use for the scheduled job is not present, you can add it.

Roles required:
  • If you have the admin role, you can add repositories to the scheduled job.
  • If you have sn_vul.vulnerability_read, you can execute the scheduled job.
  • If you have sn_vul.vulnerability_write, you can edit the details of the scheduled job.

Procedure

  1. Navigate to Vulnerability > Administration > NVD Auto-Update.
  2. For each NVD repository that you want to update automatically, change the Automatically update field to true.
  3. Navigate to Vulnerability > Administration > Integrations.
  4. Select the NIST National Vulnerability Database scheduled job.
  5. Modify the fields as needed.
    Table 1. Vulnerability Integration form
    Field Description
    Name Name of the scheduled job.
    Active Specifies whether the scheduled job is active. If you have previously set up this job and then decided to use a different integration, you can uncheck this box to deactivate the job.
    Run Frequency you want the job to run. Subsequent fields are displayed or hidden based on your setting in this field.
    Day Day you want the scheduled job to run.

    If you selected Weekly in the Run field, this field displays the days of the week. If you selected Monthly in the Run field, this field displays the days of the month.

    Time Time you want the scheduled job to start.
    Application [Read only] Name of the application for which you are running the scheduled job.
    Repeat Interval Number of days and hours before the scheduled job runs again. This field appears when Periodically is selected from the Run list.
    Starting Date and time to start the periodic updates. This field appears when Periodically is selected from the Run list.
    Conditional Check box to add conditional parameters.
    Condition Conditions to run the scheduled job. This field appears when the Conditional check box is selected.
    Integration Details
    Integration script Script for pulling data from the data sources in the Data Sources related list.
    Integration factory script Calls the Integration script.
    Report processor strategy Strategy for pulling data and processing the scheduled job.
    • If you have identified data sources and added them to the Data Sources related list, you can select Data Source Attachment to pull data from the data sources using the script in the Integration script field.
    • To select a custom processor in the Report Processor field, select Custom Report Processor.
    Report processor Script to execute when the scheduled job runs. This field appears when Custom Report Processor is selected in the Report processor strategy list.
    Processor factory script Script to build the report processor. This field appears when Custom Report Processor is selected in the Report processor strategy list.
    Related Lists
    Data Sources Defines what data should be imported.
    Vulnerability Integration Runs Historical record of the integration executions.
  6. To save your changes, click Update.
  7. To run the scheduled job immediately, click Execute Now.
    Note: When the scheduled job runs and new records are downloaded to the NVD, an email notification is sent to the members of the vulnerability response group.
Feedback