---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Filtering within Vulnerability Response

# Filtering within Vulnerability Response {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Remediation Task Rules, Calculators, and Assignment Rules use conditions during import,
created using the Condition builder. Changes to their criteria can affect
performance since each record is evaluated using these filters.

The rules and calculators shipped with the base system are optimized for performance. Editing
or creating rules or calculators takes care and may require both ServiceNow
and Vulnerability Response expertise.

## Avoid filtering based on subclass fields {#vr-filtering__section_hm4_gyn_p3b}

Some tables support extension. An example of that is the CMDB CI \[cmdb_ci\] table. Tables like cmdb_ci_hardware and cmdb_ci_computer extend this table. If you filter based on a field that is not on the parent table, that filter can be expensive to construct and evaluate.

For example, filtering on Configuration ItemCost would not adversely affect performance because Cost is a
class field, and not a subclass field, of Configuration Item. ![Filtering on class field example]()  
Configuration ItemComputer, however, is a subclass requiring a dot-walk to another field, in this case, Operating System. This process can take many milliseconds which adds up quickly, when millions of vulnerable items are being imported, and affect performance. ![Filtering on subclass field example.]()  
Note:  
Using the \[contains\] condition is like a wild card search and can cause performance impact. Using \[is\], wherever possible, is more efficient.

*[\>]: and then