Home New York Security Incident Management Security Operations Vulnerability Response Vulnerability Response setup Optional Vulnerability Response setup tasks Create, enable, or, modify Vulnerability Response auto delete rules

Create, enable, or, modify Vulnerability Response auto delete rules

You can create, enable, or, modify the delete vulnerability item (VI) and vulnerability group (VG) delete rules. Use auto delete to remove older records from the VI and VG tables.

Before you begin

Roles required:

admin: modify the auto delete rules
sn_vul.admin: view the auto-delete module

Starting with v10.3, persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

About this task

Over time, a large amount of closed records are likely to accumulate in the VI and VG tables in your instance. Many of these records may have been closed for more than 365 days but have not been removed. Use auto delete rules to remove many of these older, closed records. Removing these records not only significantly reduces the number of records in the VI and VG tables, deleting them also helps you maintain high performance.

Although auto delete targets records by default that have been closed for 365 days, the very first run may attempt to purge too many records in a single transaction. Depending on the size of your environment, you may prefer to stagger the deletion process to limit the scope of the query. For example, you might start your first run for closed records that are older than 450 days. After that run is completed, you might work your way down by smaller increments (425, 400, 375) until you have reduced the number of records that are older than 365 days.

There are two rules supplied with your Now Platform® that automatically delete closed records that meet specified conditions along with any records that refer to them. One rule deletes vulnerable items, and the other rule deletes vulnerability groups. By default, these auto delete rules are disabled so that you are required to enable them manually prior to deleting any records. You can choose the two pre-configured rules that are provided with your instance, or, you can create your own.

Procedure

Navigate to Vulnerability Response > Administration > Auto-Delete Rules.
The list view is displayed.
To edit: Select the delete rule for vulnerable items (sn_vul_vulnerable_item) or the rule for vulnerability groups (sn_vul_vulnerability).
To create: Click New.

Fill in or edit the fields on the form, as appropriate.


Field	Description
Application	Name of the application in which records are being deleted. The default value is Vulnerability Response.
Tablename	Name of the table for which the rule is being applied.
Matchfield	Field for which the system monitors the duration.
Active	Option for activating the rule. Once activated, the record can be deleted.
Cascade delete	Option to delete all matching records, plus any records referring to them. If this option is not selected, only matching records are deleted, but not the records that refer to them.
Age in seconds	Age of the vulnerability record to be deleted. For both VI and VG rules, the age is 365 days. This age is displayed in seconds.
Conditions	Filter conditions defining the records in the VI and VG tables to which the rules apply.

Select the Active option to activate a rule.

Once the rule is activated, the hourly platform function, Auto flush, deletes those records from the table for which the rule is activated.
If your environment has millions, or ten of millions of records that match your delete criteria, you may want to consult with ServiceNow® customer support prior to enabling the auto delete rules to help you delete records using a phased process.

Previous topic

Next topic

Release version

Create, enable, or, modify Vulnerability Response auto delete rules

You can create, enable, or, modify the delete vulnerability item (VI) and vulnerability group (VG) delete rules. Use auto delete to remove older records from the VI and VG tables.

Before you begin

Roles required:

admin: modify the auto delete rules
sn_vul.admin: view the auto-delete module

About this task

Procedure

Navigate to Vulnerability Response > Administration > Auto-Delete Rules.
The list view is displayed.
To edit: Select the delete rule for vulnerable items (sn_vul_vulnerable_item) or the rule for vulnerability groups (sn_vul_vulnerability).
To create: Click New.

Fill in or edit the fields on the form, as appropriate.


Field	Description
Application	Name of the application in which records are being deleted. The default value is Vulnerability Response.
Tablename	Name of the table for which the rule is being applied.
Matchfield	Field for which the system monitors the duration.
Active	Option for activating the rule. Once activated, the record can be deleted.
Cascade delete	Option to delete all matching records, plus any records referring to them. If this option is not selected, only matching records are deleted, but not the records that refer to them.
Age in seconds	Age of the vulnerability record to be deleted. For both VI and VG rules, the age is 365 days. This age is displayed in seconds.
Conditions	Filter conditions defining the records in the VI and VG tables to which the rules apply.

Select the Active option to activate a rule.

Once the rule is activated, the hourly platform function, Auto flush, deletes those records from the table for which the rule is activated.
If your environment has millions, or ten of millions of records that match your delete criteria, you may want to consult with ServiceNow® customer support prior to enabling the auto delete rules to help you delete records using a phased process.

How search works:

Topics are ranked in search results by how closely they match your search terms

Create, enable, or, modify Vulnerability Response auto delete rules

Create, enable, or, modify Vulnerability Response auto delete rules

On this page

Create, enable, or, modify Vulnerability Response auto delete rules

Create, enable, or, modify Vulnerability Response auto delete rules

Log in to personalize your search results and subscribe to topics