Rumble 2.1: Notification Templates, AWS EC2 Enrichment, and Cisco SNTC Exports

(updated ), by HD Moore
icon
Rumble, Inc. is now runZero!

Rumble Network Discovery is now runZero!

Rumble Network Discovery 2.1

Rumble 2.1 is now live with support for custom notification templates, AWS EC2 scan enrichment, Cisco serial number exports for SNTC, faster exports, more flexible imports, an updated Splunk Addon, and much more!

Custom notification emails and Slack posts

The Rules Engine added in Rumble 2.0 now supports custom notification templates in plain text, HTML, and JSON formats. These templates support the Mustache syntax and can include the results from search queries and post-scan asset changes. HTML templates can make for pretty automated reports, while custom JSON templates power fancy Slack notifications.

Email Notification Templates

Webhook notifications now also support custom HTTP headers for endpoints that require bearer token or basic authentication.

Webhook Notification Templates

Enrich your AWS VPC discovery data

The runZero Explorer now detects and uses the AWS API to automatically enrich VPC scans with instance details. VPC scans will now show the internal IPs, external IPs, MAC addresses, and instance attributes for any EC2 instances in the scan scope, automatically. AWS instance tags are also applied to your Rumble assets. To enable this feature, make sure the instance running the Explorer is configured with ec2:DescribeInstances permission (via IAM instance role or via awscli configure). Explorers with EC2 enrichment support will show a new cloud icon in the capabilities column of the Explorers list. Big thanks to Dustin for making this suggestion!

AWS EC2 scan enrichment

Easily track Cisco warranties with Smart Net Total Care (SNTC) export

Looking for an easy way to upload all router and switch serial numbers to the Cisco Smart Net Total Care (SMTC) platform for warranty tracking? Rumble now supports this specific export format, simplifying the process of checking support coverage of all deployed Cisco equipment. This feature is available for Rumble Enterprise users.

Cisco SNTC Export

The Inventory can be used to apply tags in bulk and now it supports tag removal too. Specify a tag with a minus sign prefix and that tag will be removed from all selected assets. Subnet tags now use the same search syntax as asset tags and these can be used interchangeably in search queries.

Bulk Tag Removal

Import, Export, and the Splunk Addon

Inventory exports via the web console and API are now faster, especially when used with complex search queries. The Recurring and Search tabs of the task view now provide the option to export into CSV and JSON formats. The CSV export includes the schedule of each recurring task and the estimated runtime. The Splunk Addon now syncs faster and now supports proxies. Imported asset CSV files now ignore extra records.

Export Recurring Tasks

SNMP v2 Community Indexing

This release adds automatic support for community indexing when using SNMP v2 to enumerate Cisco Catalyst switches. This leads to full port enumeration across all VLANs with no additional configuration. A reasonable timeout is enforced for systems with extreme VLAN configurations.

Release Notes

Read the release notes to view all the updates and improvements in Rumble 2.1.

Don’t have access to Rumble yet? Sign up for a free trial to try out these new capabilities.

Similar Content

November 15, 2022

runZero 3.3: Unmatched visibility into your Google ecosystem

What’s new with runZero 3.3? Extended visibility into Google Workspace Queries for Google Workspace users and groups Fingerprinting for Google assets Identification of OpenSSL services Improvements to the runZero Console Extended visibility into Google Workspace …

Read More

October 18, 2022

runZero 3.2: A 365-degree view of your Microsoft environment

What’s new with runZero 3.2? Integrations with Microsoft 365 Defender and Microsoft Intune Query and report on Active Directory users and groups Fingerprint updates User experience improvements Complete visibility into your Microsoft assets Over the last few months, …

Read More

September 13, 2022

runZero 3.1: Sync Active Directory, import assets from Shodan, and launch integrations from Explorers

What’s new with runZero 3.1? Sync your Active Directory users, groups, and machines with runZero Import assets and external services from Shodan Launch integrations from Explorers Connect and sync Active Directory with runZero runZero Professional and Enterprise users …

Read More