Root cause: archived findings were never removed from ivanti_findings (state='open'), so they appeared in previousFindings every sync, got flagged as 'disappeared' every time, and were re-classified by the drift checker — inflating the BU reassignment count to ~220/sync when only a handful of genuinely new reassignments existed. Fixes: 1. Filter out already-archived findings (archived >2h ago) before passing to the drift checker — only genuinely new archives get classified. 2. Delete disappeared findings from ivanti_findings after archive detection so they don't pollute future syncs. 3. Cleaned up 536 stale findings that were accumulated in the table. The archive activity bar chart should drop from ~500 to near-zero on the next sync, with only genuinely new disappearances showing.
72 KiB
72 KiB