Monitoring Ingestion and Enrichment
Use the VRM Utilities Dashboard, VRM - Ingestion Page, and VRM - Staged Ingestion to track import progress and troubleshoot failed batches.
Choose Your Path
Goal | Go To |
|---|---|
Watch volume and source trends | |
Inspect one ingestion page | |
Inspect a staged enrichment batch |
Dashboard Features
The VRM Utilities Dashboard includes:
Card | Use |
|---|---|
Ingestion and Enrichment Queue | Shows Pending Submission to Enrichment and Successfully Submitted to Enrichment. |
Enrichments Over Time | Shows enrichment volume over the selected time range. |
Vulnerability Findings Ingested & Submitted to Enrichment | Total findings that reached enrichment. |
Vulnerability Findings Ingested from CSV | Total findings ingested from CSV files. |
Submitted Vulnerability Findings by Type | Breaks submitted findings down by type, such as CSV. |
Use the dashboard to confirm that pages are moving into staging and that enrichment volume matches expected import size.
Review Staged Ingestion
- In the VRM - Utilities workspace, open VRM - Staged Ingestion.
- Open a staging record. The Staged Ingestion tab has Files and Metrics.
- Under Files, review Incoming Findings, Failed Findings, and Swimlane Intelligence Cache.
- Under Metrics, review Status, Time Taken, Created, Updated, Skipped, Failed, and Total Processed.
- If Failed is greater than zero, download Failed Findings. Open the Support tab and review Error Message.
- If status stays on New or an error value, wait for the in-progress batch to finish or correct the error before the next staging run.
Staging Status Values
Status | Meaning |
|---|---|
New | The staging record is new and intelligence cache building is in progress. |
Cache Populated | The Swimlane Intelligence Cache attachment is on the record. |
Enriched | Findings were enriched successfully. |
Error at Swimlane Intelligence Cache | Cache build failed. The next scheduled run retries. |
Error at Enrich Findings | Enrichment failed. The next scheduled run retries. |
Troubleshoot
Symptom | What to Check |
|---|---|
Pages remain pending | Confirm VRM - Stage for Enrichment is enabled and that no staging batch is blocked. |
Staging record has failed findings | Open Failed Findings. Confirm the enrichment connector is 2.1.2 or later and that VRM Client Configuration has valid host, account, tenant, and token values. |
CVE lookups fail | Contact Swimlane Support to confirm the Security Intelligence feature flag is enabled for the tenant region. |
Skip counts are unexpectedly high | Refresh Export All Findings & Assets so comparison files are current. |