--- title: Wiz Integration Doubled Cloud CIs With No De-duplication Tasks description: A Wiz integration doubled a broadcaster's cloud server CIs without raising one duplicate task. Why the engine missed it and how we fixed it. image: https://www.apexconfiguration.com/hubfs/AI-Generated%20Media/Images/Dim%20Broadcast%20Control%20Room%20With%20Engineers%20And%20Server%20Monitor.png --- [![APEX CONFIGURATION GROUP](https://www.apexconfiguration.com/hs-fs/hubfs/Act3%20child/images/ACG-logo.png?width=135&height=93&name=ACG-logo.png "APEX CONFIGURATION GROUP")](https://www.apexconfiguration.com/) [![APEX CONFIGURATION GROUP](https://www.apexconfiguration.com/hs-fs/hubfs/Act3%20child/images/ACG-logo.png?width=135&height=93&name=ACG-logo.png "APEX CONFIGURATION GROUP")](https://www.apexconfiguration.com/) - [Home](https://www.apexconfiguration.com) - ServiceNow - [ServiceNow CMDB](https://www.apexconfiguration.com/servicenow-cmdb) - [CMDB Health Check](https://www.apexconfiguration.com/cmdb-health-check) - [CMDB Design & Implementation](https://www.apexconfiguration.com/cmdb-design-implementation) - [Managed Service](https://www.apexconfiguration.com/managed-cmdb-services) - [Automation & Optimisation](https://www.apexconfiguration.com/cmdb-automation-tools) - Maximising ServiceNow - [CMDB Health Dashboard](https://www.apexconfiguration.com/cmdb-health-dashboard-servicenow) - [CMDB Dependency Mapping](https://www.apexconfiguration.com/cmdb-relationship-table) - [CMDB Configuration Items](https://www.apexconfiguration.com/cmdb-configuration-items) - [CMDB Workspace](https://www.apexconfiguration.com/cmdb-workspace-servicenow) - [CMDB Best Practice](https://www.apexconfiguration.com/cmdb-best-practices) - [ServiceNow Discovery](https://www.apexconfiguration.com/servicenow-discovery-setup) - [Service Mapping](https://www.apexconfiguration.com/servicenow-service-mapping) - About - [How We Help](https://www.apexconfiguration.com/about-apex) - [What is a CMDB?](https://www.apexconfiguration.com/what-is-cmdb) - [Benefits](https://www.apexconfiguration.com/benefits-of-cmdb) - Resources - [Blog](https://www.apexconfiguration.com/blog) - [Contact Us](https://www.apexconfiguration.com/contact-us) [Contact Us](https://www.apexconfiguration.com/contact-us) [Contact Us](https://www.apexconfiguration.com/contact-us) - [Home](https://www.apexconfiguration.com) - ServiceNow - [ServiceNow CMDB](https://www.apexconfiguration.com/servicenow-cmdb) - [CMDB Health Check](https://www.apexconfiguration.com/cmdb-health-check) - [CMDB Design & Implementation](https://www.apexconfiguration.com/cmdb-design-implementation) - [Managed Service](https://www.apexconfiguration.com/managed-cmdb-services) - [Automation & Optimisation](https://www.apexconfiguration.com/cmdb-automation-tools) - Maximising ServiceNow - [CMDB Health Dashboard](https://www.apexconfiguration.com/cmdb-health-dashboard-servicenow) - [CMDB Dependency Mapping](https://www.apexconfiguration.com/cmdb-relationship-table) - [CMDB Configuration Items](https://www.apexconfiguration.com/cmdb-configuration-items) - [CMDB Workspace](https://www.apexconfiguration.com/cmdb-workspace-servicenow) - [CMDB Best Practice](https://www.apexconfiguration.com/cmdb-best-practices) - [ServiceNow Discovery](https://www.apexconfiguration.com/servicenow-discovery-setup) - [Service Mapping](https://www.apexconfiguration.com/servicenow-service-mapping) - About - [How We Help](https://www.apexconfiguration.com/about-apex) - [What is a CMDB?](https://www.apexconfiguration.com/what-is-cmdb) - [Benefits](https://www.apexconfiguration.com/benefits-of-cmdb) - Resources - [Blog](https://www.apexconfiguration.com/blog) - [Contact Us](https://www.apexconfiguration.com/contact-us) [Contact Us](https://www.apexconfiguration.com/contact-us) [tel:+442080588135](tel:+442080588135)[mailto:contact@apexconfiguration.com](mailto:contact@apexconfiguration.com) [Case Studies](https://www.apexconfiguration.com/blog/tag/case-studies)[ServiceNow](https://www.apexconfiguration.com/blog/tag/servicenow) [Service Graph Connectors](https://www.apexconfiguration.com/blog/tag/service-graph-connectors)[Duplicate CIs](https://www.apexconfiguration.com/blog/tag/duplicate-cis) # Wiz Integration Doubled Cloud CIs With No De-duplication Tasks [![Warren O'Neill](https://www.apexconfiguration.com/hs-fs/hubfs/warren-oneill.webp?width=40&height=40&name=warren-oneill.webp)](https://www.apexconfiguration.com/blog/author/warren-oneill) by [Warren O'Neill](https://www.apexconfiguration.com/blog/author/warren-oneill) 4 min read Sep 29, 2026, 9:00:01 AM A security tool integration doubled the number of cloud server configuration items (CIs) in one broadcaster's configuration management database (CMDB), and ServiceNow never raised a single de-duplication task for them. The Wiz records that created those CIs carried no identifier matching the CIs already in the CMDB, so the Identification and Reconciliation Engine (IRE) treated every server as new. Change requests then landed on the wrong records. We switched off the server import from Wiz and replaced it with the Service Graph Connector for Amazon Web Services. | At a glance | | | --- | --- | | Sector | Broadcasting | | Estate | Tens of millions of CIs | | What went wrong | An integration created cloud server CIs that duplicated the ones Discovery had built | | What it cost | Failed changes, raised against the wrong CIs | | What fixed it | Server import from Wiz disabled and replaced by the Service Graph Connector for Amazon Web Services | ## Why nobody expected the integration to create duplicates The plan looked sensible. Wiz was treated as the definitive source of truth for the cloud estate, so the integration would use it to create cloud server CIs in ServiceNow, and no duplicates were expected. ServiceNow Discovery had already built CIs for the same servers. Two sources described the same servers, and neither knew about the other. That happens easily once you see [how an enterprise CMDB fits together](https://www.apexconfiguration.com/what-is-cmdb), because each source writes its own records and the CMDB has to decide, record by record, whether it has seen the thing before. What decides that is which identifying values each source carries. In this case the Wiz data exposed no unique identifier for the cloud servers that matched any value the CMDB already held. ## Why the engine raised no de-duplication tasks The IRE decides whether an incoming record is a new CI or an update to an existing one by comparing identifying values, such as a serial number or a cloud instance identifier, with the values already held. When an incoming record shares no identifying value with any existing CI, the engine has no grounds to link the two. It creates a new CI, correctly by its own rules. De-duplication tasks come from the same comparison. They appear when the engine can see that two records share identifying values. Two records with nothing in common look like two different servers, so nothing reaches the task list and no report turns red. The [identification rules](https://www.apexconfiguration.com/blog/servicenow-identification-rules-how-cmdb-duplicate-prevention-really-works) were doing exactly what they were built to do. That is why the problem stayed invisible. ## How a cloud administrator spotted it A cloud administrator noticed that the CMDB held twice as many cloud servers as he could see in Wiz. The de-duplication task list showed nothing, so the count was the only signal. By then the cost had landed. Change requests had been raised against the wrong CIs, so the impact of those changes was not seen in advance, and changes failed. ## What we changed We disabled the import of cloud servers from Wiz and replaced it with the Service Graph Connector for Amazon Web Services. Every other CI type coming from Wiz kept flowing in, so the rest of the integration carried on as before. The reason to prefer the connector for this class of CI is where it reads from. It takes its data from the cloud provider, which defines those servers, so it can supply identifying values that a security tool's inventory may not expose. Those are the values the engine needs to match against the [records ServiceNow Discovery had already built](https://www.apexconfiguration.com/servicenow-discovery-setup). ## Four checks to run before an integration creates CIs Each of these takes less time than the first failed change. 1. **Ask which identifying values the source carries for each class.** Confirm that at least one matches a value already in the CMDB. If none does, the integration will create new CIs alongside the existing ones. 2. **Load a small sample into a non-production instance first.** Look at what happens to servers that Discovery already holds. Do it before any production load. 3. **Compare counts by class after the first production load.** The source's count and the CMDB's count should be close. Twice the count is a duplicate signal even when the task list is empty. 4. **Decide which source may create CIs in each class.** A source of truth for security findings does not automatically qualify as the source for CI identity. Our article on [why ServiceNow integrations fail without accurate data](https://www.apexconfiguration.com/blog/servicenow-integration-accurate-data-value) covers what to look at first. ## How Apex helps Our discovery and integration coverage review establishes what is missing from your estate view, where it is missing, and what that absence costs you during an incident. It covers horizontal discovery and third-party tool integration. It is scoped at an initial consultation against your estate. For a quick, scored view, our two-week CMDB health baseline tells you which CIs are trustworthy and which are guesses, in a report you can take to your change advisory board. [Book a CMDB diagnostic call](https://www.apexconfiguration.com/cmdb-diagnostic-call) or [arrange a meeting with one of our consultants](https://www.apexconfiguration.com/book-a-meeting). ## Frequently asked questions ### Why didn't ServiceNow flag the duplicates? De-duplication tasks are raised when the engine can see that two records share identifying values. These records shared none, so the engine treated them as different servers and had nothing to flag. ### How can I tell whether an integration is creating duplicates? Compare the source's count with the CMDB's count for each class. Then look at CIs from the integration that share a name or address with a CI from another source but carry no common identifier. A count close to double is the clearest sign. ### Should a security tool be the source of truth for cloud servers? It can be the source of truth for its own findings. Decide separately which source may create CIs in each class, and check that the source carries identifiers the CMDB can match before you switch it on. ### Does this only affect very large estates? No. The mechanism is the same at any size. A large estate makes the cost bigger and the gap harder to notice. - Recent - Topics - Archive Recent ### Recent Topics ### Topics - [ServiceNow (25)](https://www.apexconfiguration.com/blog/tag/servicenow) - [CMDB (22)](https://www.apexconfiguration.com/blog/tag/cmdb) - [CMDB Data Quality (10)](https://www.apexconfiguration.com/blog/tag/cmdb-data-quality) - [Change Management (4)](https://www.apexconfiguration.com/blog/tag/change-management) - [Agentic AI (3)](https://www.apexconfiguration.com/blog/tag/agentic-ai) - [CI Ownership (3)](https://www.apexconfiguration.com/blog/tag/ci-ownership) - [Compliance & Audit (3)](https://www.apexconfiguration.com/blog/tag/compliance-audit) - [Incident Management (3)](https://www.apexconfiguration.com/blog/tag/incident-management) - [Service Mapping (3)](https://www.apexconfiguration.com/blog/tag/service-mapping) - [Vulnerability Management (3)](https://www.apexconfiguration.com/blog/tag/vulnerability-management) - [Cyber Security (2)](https://www.apexconfiguration.com/blog/tag/cyber-security) - [Data Model Design (2)](https://www.apexconfiguration.com/blog/tag/data-model-design) - [Duplicate CIs (2)](https://www.apexconfiguration.com/blog/tag/duplicate-cis) - [Enterprise Risk Management (2)](https://www.apexconfiguration.com/blog/tag/enterprise-risk-management) - [IT Cost Optimisation (2)](https://www.apexconfiguration.com/blog/tag/it-cost-optimisation) - [IT Governance (2)](https://www.apexconfiguration.com/blog/tag/it-governance) - [ServiceNow Discovery (2)](https://www.apexconfiguration.com/blog/tag/servicenow-discovery) - [CI Reconciliation (1)](https://www.apexconfiguration.com/blog/tag/ci-reconciliation) - [CMDB Remediation (1)](https://www.apexconfiguration.com/blog/tag/cmdb-remediation) - [Case Studies (1)](https://www.apexconfiguration.com/blog/tag/case-studies) - [Configuration Management (1)](https://www.apexconfiguration.com/blog/tag/configuration-management) - [Dependency Views (1)](https://www.apexconfiguration.com/blog/tag/dependency-views) - [IRE (1)](https://www.apexconfiguration.com/blog/tag/ire) - [IT Asset Management (1)](https://www.apexconfiguration.com/blog/tag/it-asset-management) - [Operational Efficiency (1)](https://www.apexconfiguration.com/blog/tag/operational-efficiency) - [Problem Management (1)](https://www.apexconfiguration.com/blog/tag/problem-management) - [Service Graph Connectors (1)](https://www.apexconfiguration.com/blog/tag/service-graph-connectors) - [ServiceNow Advisory (1)](https://www.apexconfiguration.com/blog/tag/servicenow-advisory) See all Archive ### Archive - [September 2026 (14)](https://www.apexconfiguration.com/blog/archive/2026/09) - [August 2026 (2)](https://www.apexconfiguration.com/blog/archive/2026/08) - [July 2026 (4)](https://www.apexconfiguration.com/blog/archive/2026/07) - [June 2026 (3)](https://www.apexconfiguration.com/blog/archive/2026/06) - [May 2026 (2)](https://www.apexconfiguration.com/blog/archive/2026/05) ### Subscribe by email Share this [Share on X](https://x.com/intent/post?url=https://www.apexconfiguration.com/blog/wiz-integration-duplicate-cloud-cis&text=Wiz+Integration+Doubled+Cloud+CIs+With+No+De-duplication+Tasks) [Share on Facebook](https://www.facebook.com/sharer/sharer.php?u=https://www.apexconfiguration.com/blog/wiz-integration-duplicate-cloud-cis&t=Wiz+Integration+Doubled+Cloud+CIs+With+No+De-duplication+Tasks) [Share on LinkedIn](https://www.linkedin.com/shareArticle?mini=true&url=https://www.apexconfiguration.com/blog/wiz-integration-duplicate-cloud-cis&t=Wiz+Integration+Doubled+Cloud+CIs+With+No+De-duplication+Tasks) Previous story [← Why Your Change Advisory Board Is Approving Changes Blind](https://www.apexconfiguration.com/blog/change-advisory-board-cmdb-risk) ![Warren O'Neill](https://www.apexconfiguration.com/hs-fs/hubfs/warren-oneill.webp?width=64&height=64&name=warren-oneill.webp) By [Warren O'Neill](https://www.apexconfiguration.com/blog/author/warren-oneill) Co-owner and Technology Director at Apex Configuration Group, based in Bath, UK. Warren specialises in ServiceNow CMDB and CSDM, ITOM Discovery, Service Mapping and pattern development, with a focus… [Full profile & credentials →](https://www.apexconfiguration.com/blog/author/warren-oneill) ### Get Email Notifications [![APEX CONFIGURATION GROUP](https://www.apexconfiguration.com/hs-fs/hubfs/Act3%20child/images/ACG-logo.png?width=135&height=93&name=ACG-logo.png)](https://www.apexconfiguration.com/) ServiceNow CMDB specialists delivering enterprise-grade implementation, remediation, and managed services. Address: 20 Wenlock Road, London, England, N1 7GU VAT Number: 505 0347 31 Company Number: 15871442 Email: [contact@apexconfiguration.com](mailto:contact@apexconfiguration.com) [Follow Apex Configuration Group on LinkedIn](https://www.linkedin.com/company/apex-configuration-group) Services - [CMDB Health Check](https://www.apexconfiguration.com/cmdb-health-check) - [Design & Implementation](https://www.apexconfiguration.com/cmdb-design-implementation) - [Managed Service](https://www.apexconfiguration.com/managed-cmdb-services) - [Automation & Optimisation](https://www.apexconfiguration.com/cmdb-automation-tools) - [Health Dashboard & Reporting](https://www.apexconfiguration.com/cmdb-health-dashboard-servicenow) Company - [What is a CMDB?](https://www.apexconfiguration.com/what-is-cmdb) - [Benefits](https://www.apexconfiguration.com/benefits-of-cmdb) - [About](https://www.apexconfiguration.com/about-apex) - [Blog](https://www.apexconfiguration.com/blog) Resources - [Contact Us](https://www.apexconfiguration.com/contact-us) - [CMDB Diagnostic Call](https://www.apexconfiguration.com/cmdb-diagnostic-call) - [Book A Meeting](https://www.apexconfiguration.com/book-a-meeting) © 2026 Apex Configuration Group. All rights reserved. ServiceNow is a trademark of ServiceNow, Inc. We are not affiliated with or endorsed by ServiceNow. - [Terms](https://www.apexconfiguration.com/terms) - [Cookies](https://www.apexconfiguration.com/cookie-policy) - [Privacy](https://www.apexconfiguration.com/privacy-policy) ```json { "@context" : "https://schema.org", "@id" : "https://www.apexconfiguration.com/#organization", "@type" : "ProfessionalService", "address" : { "@type" : "PostalAddress", "addressCountry" : "GB", "addressLocality" : "London", "addressRegion" : "England", "postalCode" : "N1 7GU", "streetAddress" : "20 Wenlock Road" }, "alternateName" : "Apex Configuration Group", "areaServed" : "GB", "contactPoint" : { "@type" : "ContactPoint", "areaServed" : "GB", "availableLanguage" : "en", "contactType" : "customer service", "telephone" : "+44 20 8058 8135" }, "geo" : { "@type" : "GeoCoordinates", "latitude" : 51.530737, "longitude" : -0.09371 }, "image" : "https://www.apexconfiguration.com/hs-fs/hubfs/Act3%20child/images/Configuration-data.webp", "logo" : "https://www.apexconfiguration.com/hs-fs/hubfs/Act3%20child/images/ACG-logo.png", "name" : "Apex Configuration Group Ltd", "sameAs" : [ "https://www.linkedin.com/company/apex-configuration-group" ], "telephone" : "+44 20 8058 8135", "url" : "https://www.apexconfiguration.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.apexconfiguration.com/#website", "@type" : "WebSite", "inLanguage" : "en-GB", "name" : "Apex Configuration Group", "publisher" : { "@id" : "https://www.apexconfiguration.com/#organization" }, "url" : "https://www.apexconfiguration.com/" } ``` ```json { "@context" : "https://schema.org", "@type" : "WebPage", "description" : "A Wiz integration doubled a broadcaster's cloud server CIs without raising one duplicate task. Why the engine missed it and how we fixed it.", "inLanguage" : "en-GB", "name" : "Wiz Integration Doubled Cloud CIs With No De-duplication Tasks", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.apexconfiguration.com/hs-fs/hubfs/Act3%20child/images/ACG-logo.png" }, "name" : "Apex Configuration Group Ltd", "url" : "https://www.apexconfiguration.com/" }, "url" : "https://www.apexconfiguration.com/blog/wiz-integration-duplicate-cloud-cis" } ``` ```json { "@context" : "https://schema.org", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://www.apexconfiguration.com/", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://www.apexconfiguration.com/blog/wiz-integration-duplicate-cloud-cis", "name" : "Wiz Integration Doubled Cloud CIs With No De-duplication Tasks", "position" : 2 } ] } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Warren O'Neill", "sameAs" : [ "https://www.linkedin.com/in/warren-oneill/" ], "url" : "https://www.apexconfiguration.com/blog/author/warren-oneill" }, "dateModified" : "2026-09-29T08:00:01+0000", "datePublished" : "2026-09-29T08:00:01+0000", "headline" : "Wiz Integration Doubled Cloud CIs With No De-duplication Tasks", "image" : [ "https://147949153.fs1.hubspotusercontent-eu1.net/hubfs/147949153/AI-Generated%20Media/Images/Dim%20Broadcast%20Control%20Room%20With%20Engineers%20And%20Server%20Monitor.png" ], "mainEntityOfPage" : { "@id" : "https://www.apexconfiguration.com/blog/wiz-integration-duplicate-cloud-cis", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.apexconfiguration.com/hs-fs/hubfs/Act3%20child/images/ACG-logo.png" }, "name" : "Apex Configuration Group Ltd", "url" : "https://www.apexconfiguration.com/" } } ```