---
title: Discovered Items
description: Assets are automatically matched to configuration items \(CIs\) in the Configuration Management Database \(CMDB\) when they are imported using CI Lookup Rules. Discovered Items give you visibility into how asset identification is mapped to CIs in the CMDB.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/cj-discovered-items.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Exploring the Vulnerability Response application, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Discovered Items

Assets are automatically matched to configuration items \(CIs\) in the Configuration Management Database \(CMDB\) when they are imported using **CI Lookup Rules**. Discovered Items give you visibility into how asset identification is mapped to CIs in the CMDB.

Discovered Items are considered **Matched**, **Unmatched**, or **Reclassified**. Identified CIs are in the **Matched** state.

To make it easier to find potential matching issues, the CI Lookup Rule that matched the CI appears in the **CI matching rule** field.

By default, the **Security Operations** > **CMDB** > **Discovered Items** module lists unmatched configuration items. You can view all discovered items from an import by removing the filter.

For a description of the fields in Discovered Items, see [Discovered Items form fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/discovered-items-fields.md). For more information on reconciling unmatched discovered items and reapplying CI lookup rules on selected discovered items, see [Reconcile unmatched discovered items](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/reapply-reconcile-unmatched-discovered-items.md) and [Reapply CI lookup rules on selected discovered items](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/reapply-ci-lookup-rules-di.md) respectively.

-   **[CI changes for discovered items](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/reapply-discovered-items-ci-changes.md)**  
When a configuration item \(CI\) on a discovered item \(DI\) changes, the impacted detections and vulnerable items \(VIs\) are updated. The risk score, assignment rules, group rules, and remediation target rule are reevaluated.
-   **[Re-evaluating discovered items](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/re-evaluate-discovered-items.md)**  
When new data is received on a discovered item, the discovered item is not immediately re-evaluated. On receiving new data, the **reevaluate\_ci** option is set to **true** by default.

**Parent Topic:**[Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vuln-landing-page.md)