Rumble 2.1: Notification Templates, AWS EC2 Enrichment, and Cisco SNTC Exports

(updated ), by HD Moore
icon
Rumble, Inc. is now runZero!

Rumble Network Discovery is now runZero!

Rumble Network Discovery 2.1

Rumble 2.1 is now live with support for custom notification templates, AWS EC2 scan enrichment, Cisco serial number exports for SNTC, faster exports, more flexible imports, an updated Splunk Addon, and much more!

Custom notification emails and Slack posts

The Rules Engine added in Rumble 2.0 now supports custom notification templates in plain text, HTML, and JSON formats. These templates support the Mustache syntax and can include the results from search queries and post-scan asset changes. HTML templates can make for pretty automated reports, while custom JSON templates power fancy Slack notifications.

Email Notification Templates

Webhook notifications now also support custom HTTP headers for endpoints that require bearer token or basic authentication.

Webhook Notification Templates

Enrich your AWS VPC discovery data

The runZero Explorer now detects and uses the AWS API to automatically enrich VPC scans with instance details. VPC scans will now show the internal IPs, external IPs, MAC addresses, and instance attributes for any EC2 instances in the scan scope, automatically. AWS instance tags are also applied to your Rumble assets. To enable this feature, make sure the instance running the Explorer is configured with ec2:DescribeInstances permission (via IAM instance role or via awscli configure). Explorers with EC2 enrichment support will show a new cloud icon in the capabilities column of the Explorers list. Big thanks to Dustin for making this suggestion!

AWS EC2 scan enrichment

Easily track Cisco warranties with Smart Net Total Care (SNTC) export

Looking for an easy way to upload all router and switch serial numbers to the Cisco Smart Net Total Care (SMTC) platform for warranty tracking? Rumble now supports this specific export format, simplifying the process of checking support coverage of all deployed Cisco equipment. This feature is available for Rumble Enterprise users.

Cisco SNTC Export

The Inventory can be used to apply tags in bulk and now it supports tag removal too. Specify a tag with a minus sign prefix and that tag will be removed from all selected assets. Subnet tags now use the same search syntax as asset tags and these can be used interchangeably in search queries.

Bulk Tag Removal

Import, Export, and the Splunk Addon

Inventory exports via the web console and API are now faster, especially when used with complex search queries. The Recurring and Search tabs of the task view now provide the option to export into CSV and JSON formats. The CSV export includes the schedule of each recurring task and the estimated runtime. The Splunk Addon now syncs faster and now supports proxies. Imported asset CSV files now ignore extra records.

Export Recurring Tasks

SNMP v2 Community Indexing

This release adds automatic support for community indexing when using SNMP v2 to enumerate Cisco Catalyst switches. This leads to full port enumeration across all VLANs with no additional configuration. A reasonable timeout is enforced for systems with extreme VLAN configurations.

Release Notes

Read the release notes to view all the updates and improvements in Rumble 2.1.

Don’t have access to Rumble yet? Sign up for a free trial to try out these new capabilities.

Similar Content

September 13, 2022

runZero 3.1: Sync Active Directory, import assets from Shodan, and launch integrations from Explorers

What’s new with runZero 3.1? Sync your Active Directory users, groups, and machines with runZero Import assets and external services from Shodan Launch integrations from Explorers Connect and sync Active Directory with runZero runZero Professional and Enterprise users …

Read More

August 8, 2022

runZero 3.0: Check out our new name, and sync assets, software, and vulnerability data from Qualys

Rumble Network Discovery is now runZero! What’s new with runZero 3.0? Meet our new brand: runZero! Sync assets, software, & vulnerability data from Qualys Introducing runZero Rumble is officially runZero! This name change reflects our growth as a product and as a …

Read More

July 12, 2022

Rumble 2.15: Sync assets, software, and vulnerability data from Rapid7, scan external domains from our cloud, and report on external assets and services

Rumble Network Discovery is now runZero! What’s new with Rumble 2.15? Sync assets, software, and vulnerability data from Rapid7 InsightVM and Nexpose Quickly identify and report externally exposed assets and services Navigate your inventory faster with an updated …

Read More