Filter decommissioned CIs

---
title: Filter decommissioned CIs
description: Filter decommissioned configuration items \(CIs\) while running the CI lookup rules. To filter decommissioned CIs when running the Security Operations CMDB CI lookup rules, set the filterOutDecommissionedCI \[sn\_sec\_cmn.filterOutDecommissionedCI\] system property to true.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/filter-decommissioned-ci.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Create a Vulnerability Response CI lookup rule, Advanced Vulnerability Response configuration tasks, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Filter decommissioned CIs

Filter decommissioned configuration items \(CIs\) while running the CI lookup rules. To filter decommissioned CIs when running the Security Operations CMDB CI lookup rules, set the **filterOutDecommissionedCI** `[**sn\_sec\_cmn.filterOutDecommissionedCI**]` system property to true.

## Before you begin

Role required: admin

## About this task

The default value of the system property is true. This property is only applicable for CI lookup rules in Vulnerability Response and it does not impact the IRE lookup logic.

## Procedure

1.  Enter `sys_properties.list` in the left navigation bar.

2.  Select **Enter**.

3.  In the **Search** menu, under **Name** enter `sn_sec_cmn.filterOutDecommissionedCI` to filter the decommissioned CIs.

4.  In the **Value** text box, enter the value true or false.

    The default value is true.

5.  Select **Update**.

    This value is used by CI Lookup Rules during the next import. The `sn_sec_cmn.filterOutDecommissionedCI` system property filters out CIs that meet the conditions shown below while running the lookup rules.

    ```
    _isCIDecommissioned: function(gr, filterDecommissionCi) {
            var install_status = false;
            var life_cycle_stage_status = false;
            // check for property
            if (filterDecommissionCi == "true") {
                if (gr.isValidField("install_status"))
                    install_status = gr.install_status == 7;
                if (gr.isValidField("life_cycle_stage_status"))
                    life_cycle_stage_status = gr.life_cycle_stage_status == "Retired";
            }
            return install_status || life_cycle_stage_status;
    ```


**Parent Topic:**[Create a Vulnerability Response CI lookup rule](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/create-ci-identifier-rules.md)