Skip to content

Commit f902f6d

Browse files
authored
Update tune_deduplication.md
Added additional information about retroactive execution of deduplication adjustments.
1 parent fbbb1d9 commit f902f6d

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

docs/content/en/working_with_findings/finding_deduplication/tune_deduplication.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Deduplication Tuning (Pro)"
33
description: "Configure how DefectDojo identifies and manages duplicate findings"
4-
weight: 5
4+
weight: 4
55
---
66

77
Deduplication Tuning is a DefectDojo Pro feature that gives you fine-grained control over how findings are deduplicated, allowing you to optimize duplicate detection for your specific security testing workflow.
@@ -22,7 +22,7 @@ The Deduplication Settings page offers three key configuration areas:
2222

2323
Same Tool Deduplication is enabled by default for all security tool parsers. This ensures findings from consecutive scans using the same tool are properly deduplicated.
2424

25-
To configure Same Tool Deduplication:
25+
To adjust Same Tool Deduplication:
2626

2727
1. Select a specific **Security Tool** from the dropdown
2828
2. Choose a **Deduplication Algorithm** from the available options
@@ -77,8 +77,9 @@ The same three algorithm options are available for Reimport Deduplication as for
7777
For optimal results with Deduplication Tuning:
7878

7979
- **Start with defaults**: The preconfigured deduplication settings work well for most scenarios
80-
- **Test changes carefully**: After adjusting deduplication settings, monitor a few imports to ensure proper behavior
81-
- **Use Hash Code for cross-tool deduplication**: When enabling cross-tool deduplication, select fields that reliably identify the same finding across different tools (such as vulnerability name, location, and severity)
80+
- **Test changes carefully**: After adjusting deduplication settings, monitor a few imports to ensure proper behavior.
81+
- **Adjustments to deduplication will only affect new imports, and **do not retroactively adjust the hash values for findings already imported**. Pro subscribers may contact DefectDojo support to assess if deduplcation tunings can be re-executed for findings already imported prior to the deduplcation adjustments.
82+
- **Use Hash Code for cross-tool deduplication**: When enabling cross-tool deduplication, select fields that reliably identify the same finding across different tools (such as vulnerability name, location, and severity). **IMPORTANT** Each tool enabled for cross-tool deduplication **MUST** have the same fields selected.
8283
- **Avoid overly broad deduplication**: Cross-tool deduplication with too few hash fields may result in false duplicates
8384

84-
By tuning these settings, you can significantly reduce duplicate noise and create a more streamlined workflow for your security teams.
85+
By tuning deduplication settings to your specific tools, you can significantly reduce duplicate noise.

0 commit comments

Comments
 (0)