Re-evaluating discovered items

concept brazil Updated Sep 10, 2026 1 min read re-evaluate-discovered-items.md

When new data is received on a discovered item, the discovered item is not immediately re-evaluated. On receiving new data, the reevaluate_ci option is set to true by default.

The scheduled job Re-apply CI Lookup Rules on the Changed Discovered items evaluates all the discovered items whose source data is being changed by the scanner. It re-processes the discovered items and updates the vulnerable items related to the discovered item whose source data is changed. The value of this scheduled job is On Demand by default.

To avoid conflicts with an in-progress vulnerability integration run, the job checks whether such a run is active and pauses itself if one starts, processing up to 1,000 discovered items per execution. The job only reprocesses discovered items whose last scan date, last compliance scan date, or non-infra equivalent falls within the last 90 days, and it excludes discovered items that were manually matched to a configuration item.

Note: You can also choose to run this scheduled job daily. For more information about how you initiate this job, job frequency, and viewing the number of records it processes, see KB1695110 Vulnerability Response: Re-apply CI lookup rules on the Changed Discovered items.

Parent Topic:Discovered Items

27 lines · 2.2 KB Wrap lines

---
title: Re-evaluating discovered items
description: When new data is received on a discovered item, the discovered item is not immediately re-evaluated. On receiving new data, the reevaluate\_ci option is set to true by default.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/re-evaluate-discovered-items.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Discovered Items, Exploring the Vulnerability Response application, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Re-evaluating discovered items

When new data is received on a discovered item, the discovered item is not immediately re-evaluated. On receiving new data, the **reevaluate\_ci** option is set to **true** by default.

The scheduled job **Re-apply CI Lookup Rules on the Changed Discovered items** evaluates all the discovered items whose source data is being changed by the scanner. It re-processes the discovered items and updates the vulnerable items related to the discovered item whose source data is changed. The value of this scheduled job is **On Demand** by default.

To avoid conflicts with an in-progress vulnerability integration run, the job checks whether such a run is active and pauses itself if one starts, processing up to 1,000 discovered items per execution. The job only reprocesses discovered items whose last scan date, last compliance scan date, or non-infra equivalent falls within the last 90 days, and it excludes discovered items that were manually matched to a configuration item.

**Note:** You can also choose to run this scheduled job daily. For more information about how you initiate this job, job frequency, and viewing the number of records it processes, see [KB1695110 Vulnerability Response: Re-apply CI lookup rules on the Changed Discovered items](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1695110).

**Parent Topic:**[Discovered Items](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/cj-discovered-items.md)