all right let's go ahead and get started so good morning good afternoon and good evening everyone and Welcome to our webinar and thank you for being here uh so today we're going to be covering how to deploy and manage agent client collector at scale now today's session is part of the item visibility and governance webinar series and we hope that you will join us for future topics throughout the year um now today's session is also part of the live on servicenow program which is a curated set of events to connect you with servicenow experts and peers that can help you deploy servicenob products and Achieve value faster now you can see the complete schedule by scanning the QR code or by using the link that we just placed in chat so we hope that you can join us for another webinar Meetup and these cover any topic So today we're focusing on item these live on servicenow webinars will focus on just about every area that servicenow has now just a few housekeeping items before we get started so everyone's line is muted so please use the Q a feature to ask questions throughout today's session um feel free to introduce yourself when you ask a question we'd love to know who you are please participate in the polls we're going to have two polls today and it really just helps us understand uh where you are in your deployment Journey this session is being recorded and will be shared on servicenow community site as well as on YouTube for future playback and then after this webinar ends you will be prompted to fill out a short survey your feedback is greatly appreciated to help us improve this for a future series now now just a little bit about our presenters so my name is Steve Steve Emerson and I'm the outbound product manager for item visibility and governance here at servicenow and I'll be your host for today's session uh and as an outbound product manager I wear many hats product evangelists customer value realization as well as sales enablement just to name a few but what I love most about my role is that I get to meet with you and hear how you're using our products and I get to share information about how our products can help you achieve value for your business now I've been here at servicenow for five and a half years and I've been working across the servicenow ecosystem for 10 years as a customer partner and an employee and I've spent um the most of my career working in Enterprise I.T roles across a multitude of functions so I know what it's like to be in your shoes and our main presenter today uh is seven so seven can you please introduce yourself hello my name is severena I'm the product manager for the agent Clan collector and I'm delighted to be your presenter for today thank you all right thank you seven uh so without further Ado let's get started so I'll turn things over to you siren thank you very much Steve um so today is about a continuation of a webinar we gave Steve and I about uh what six months ago last summer about the agent Clan collector we have tremendous adoption of the agent and for multiple use cases and so just as a very quick refresher the agent Clan collector is a single agent that connects to your servicenow instance and it will fulfill multiple use cases we started a couple of years ago with ingesting events and metrics for item Health use cases aiops we expanded with an alternative to horizontal Discovery for the system information this is the Discovery use case we went further with application or software emittering as part of software Asset Management use case and we also delivered content for secops and itsm use cases for Better Together stories so all of this content is provided to you on servicenow platform using the store store services.com and it all gets this data into our platform of platforms service now using a single data model our cmdb that has their csdm on top of it next slide please thank you so the simple architecture it is one or set of agents that will connect to one or multiple mid servers the mid servers will host a web server so I repeat it is the agents that initiate the TCP connection to connect to the mid servers and then the mid servers will communicate that back to servicenow instance the agent can be deployed on Linux on Mac and on Windows for both servers and and user compute devices next slide very likely your infrastructure is a bit more complex than what I was describing in the first slide so think about how you want to design the architecture for using the agent you may have a need for visibility on Data Center on your virtualization platform maybe on some cloud service accounts office space as well and user compute and as you may have noticed quite a few people over the past couple of years more and more worked remotely sometimes as part of a VPN and sometimes without VPN so think about all of these use cases as as you roll out the agent next slide all right we've come to our first poll uh we'd like to understand where you are in your agent client collector Journey today so please select all that apply so the answers are here are what is ACC maybe this is the first time that you're hearing about this uh we are performing a proof of concept or POC we are undergoing an an ARB or Security review architecture review board that would be for those of you who don't who do not know what that is uh we are rolling out the agent pilot or sub production and finally we're using it in production let's just give it about 10 more seconds and it will end the poll so see a lot of answers coming in thank you very much and five four three two one go ahead and end the poll and share the results so as we can see we have a lot of you who are just seeing this for the first time that's great we you'll get to learn a little bit more about how you can deploy and manage ACC today uh the second most here are you know there's a lot of you who are performing a proof of concept or POC that's great to hear and then the rest are all pretty much equal uh some of you are undergoing an Arab Security review some of you are rolling it out in sub production and finally some of you are actually using in in production so thank you all right seven let's go on to the next slide here all right um so you all for some of you considering um the uh the agent as one of your sources of information for discovering both systems or additional use cases some of you are already in the preparation work to make it happen and some of you are in production so um very happy to see that we have a uh quite a large spectrum of profiles here in the audience and even for those who are in production already in your I.T infrastructure when you deploy a component a piece of software it normally comes with quite a few things there like we deploy the agent well you will need a made web server to be hosted in uit infrastructure as you spin up any web server in uit environment you have some security requirements to take into account you have to consider things like TLS and digital certificates load balancing High availability all of these things get complex that's why we still all have a job right so to be successful in your production rollout which can happen with just a couple of days a couple of weeks I had with some customers you must have this process where you engage with the right people at the right time and I wanted to make sure that on just one slide you can see visualize the kind of groups you need to reach out to so that uh you make the right decisions in the design and in the in the actual steps of your all out you will have to deploy the agent well if you deploy it on a few systems you can still do that manually using the the Wizard click the click it's great but very quickly you will need to package that agent into your deployment mechanism and we get to that in a minute so think about who we need to bring to be successful with a rollout next slide and this rollout you don't have just a single way to make it happen then many many approaches um there there are likely some of them that are better than others but it depends on your environment it depends on the scope so some customers started with a proven concept of proof of value that's great um you may likely do that as potentially as a pre-sales activity or for those who already have the um the licenses for that you can do it on your own or with a partner you may want later on to get into a more complex Deep dive into the agent with the pilot phase having that architecture review squared out to be successful and then Target a set of systems it can be by a region by data center or by specific environment on some cloud service accounts in particular or if you have a specific need let's say you do not have credential based Discovery enabled in just one place one segment of your network you may want to start deploying the agent into these systems at first so that you get the value of the agent immediately for your Discovery requirements foreign what you don't want to do is to spin up the agent on 150 000 systems only to realize that your heavily configured and customized instance is full of duplicated records so let's make sure that you take your phased approach to make sure that everything is right as you deploy the agent next slide please part of his puc and pilot phases again you want to take it one step at a time but make the right decisions early on so you want to understand how you're going to run the agent if you run horizontal Discovery already you may have a user that is named serviced now well that's the default user we use when we deploy the agent when we install V agents you may have a conflict here potentially so you have to make those decisions how to run the agent and how to position your mid servers to receive the agent connections next slide all right so I covered quite a lot in in our first session before about those phases to deploy the agent I realized that I didn't spend any time to actually present anything on my screen besides the slide deck I'm very sorry about that but let's call it a continuation of a first session so automation you have mainly three categories to automate the deployment of your agent one of them is to bundle the agent in a package and distribute that package as a one-time action it can be advertising the system right after it is provisioned or it can be as part of normal run and there are many solutions for that with let's say a red hat satellite for your Linux systems you can use many customers they use SCCM autanium or Big Fix as well as drama especially for Mac you can have a SSH Loop if you want to if you are like me from 20 years ago but many tools provide you these one-time commands in a way that gives you insights about what was done so this is approach number one number two is to use a configuration management system that will enforce actively enforce the state of your system of its configuration files of the services defined and running on those Target systems um maybe not at all times again it can be on demand but can we also set up on a schedule and so for that you have quite a few Solutions like puppet salt chef and symbol CF engine etc etc and the last piece is how you can handle those environments where you will prepare a master image or golden image with the agent most of the time but then clone that instance and as the Clone the VM starts up the agent will automatically connect to the mates and gets registered so you have many approaches here as you can see and they all have their uh their own pros and cons it depends on how your I.T infrastructure teams handle those environments um maybe they have one way to handle on-prem systems on data centers and maybe they have another one to handle the cloud images it may not be the same team you may have some business I.T departments here and there where they may have different standards and solutions to maintain those environments and of course end user compute mostly its own thing on the side so as you engage with this work on deploying the agent make sure that you have the right people at the table to understand which approach they take to manage with systems at scale next slide let's get a bit deeper there are many things you can configure on the agent and think about what could potentially change over time sometimes we may add new features it happens pretty much every quarter sometimes you may want to change a specific value because you made my decision to change it so what do you do with the existing systems that have been deployed it's not good enough to just think about the new systems and you don't want to have to uninstall an agent in a rainstorming agent every time this this can happen sometimes if you are already stuck in a very bad situation but normally you should just be able to enforce the agent configuration push it there um restart the bonds V agent at first and let it let it run normally so I mentioned on this slide a few items in the agent configuration that you may want to consider but it's not just the agent for example on Windows you have the windows service how you want to configure it quite a few customers started deploying the agent running with a with a default local user and maybe now they want to move to a local system or local service or a gmsa account so think about how you can manage those things with the automation that you have in place available for you on Linux sudo sudo in many companies sudoers is not handled by you on servicenow admin service no platform or cmdb admin it is handled by the system administrators they don't want you to touch sudo's files so this is where you need to engage with them and see in which one of the environments you can how can you have the various few commands that require privileged access one thing to keep in mind is that the agent is configured initially with just the way it authenticates to the mid servers by default with the API key and just like our mid servers at first the API key is not encrypted using clear text but as soon as the agent starts it will encrypt it it wouldn't encrypt it with a symmetrical key that semitical key will be generated and stored inside that acc.tml file that key is not used at all for identifying the agent it is not the agent ID that you have in your agent record on this cndb it is only to decrypt an encrypt if needed the API key or the password if you're using the HTTP Authentication which means as soon as you have that key encrypted plus the associated symmetrical key you can just bundle that into a single file and push it across all your systems so think about your approach when uh um when you want to change that configure configuration file being cautious of time here Steve any question yes everyone actually we do have a few questions I think maybe we can get these out of the way now before we move on um one number one is it possible to use a data collected by ACC in service mapping the ml service mapping presumably oh um this is um a use case that is not supported yet we support the data collection for the inventory and the related lists and in just a few seconds I will show you what it looks like on the on my demo instance okay thank you uh number two is is the same information captured by ACC that the agentless servicenow discovery captures pretty much we do have some places where we collect actually more information like the OS users plus via software metering for um for specific applications licensed applications mostly is the use case aside from that the agent does not execute patience so it will not get into the the Deep dive application discovery that you have with the probes and parents from horizontal discovery thank you and one final one before we move on um oh it just disappeared from my screen so Let's uh so let's just move on now and then if I have if you know when I find it again I'll ask it you know later on thank you so I think our next topic would be around the poll um we'd like to understand which use cases do you see ACC adding value to your organization so far so we showed the slide earlier with the use cases um so push-based Discovery AI Ops you know monitoring or health log analytics there it service management for your servers and or your end user computing for security operations for software asset management for Hardware asset management and finally governance and and Regulatory give it about 10 more seconds five four three two one let's go ahead and share those results laughs so in looking at the results here the the majority of you view push-based Discovery as the primary use case uh closely followed by it service management or end user computing and then software Asset Management then Hardware Asset Management as well as AI Ops so thank you guys for your answers we can proceed on to the next section which is where service which is where Chevron moves into the demo thank you so I have to shut my screen right yes you do it's pretty yes okay desktop one all right can you see my screen yes I can thank you um so for those of you who are new to Visa sessions you can revisit the recording from the first webinar we gave yeah but yeah back in summer in June last year and always have a look for new events we are delighted to have you on the live sessions so a link that you may want to have and I don't know if I can do I have access to the chat if I can put it there can you all see what's in the chat I have no clue all right well please visit this KB article I attached some material documentation material on well troubleshooting but recommendations for architecture as well as deep dive into TLS configuration digital certificates and mtls fips all of that stuff so please have a look and send us feedback whenever you want so closing the dock uh well let's go first to my instance that is here I will log in in just a second I don't want to see my face here on this instance I do have quite a few agents running some on VMware some on AWS on azure gcp one on a Raspberry Pi one on a Intel NOC and so well just to get started this is um the usual dashboard for the agent but we provide out of the box although I just copied it over and using the cmdb query Builder I added a few kpis for me um there are a few items that are very important uh when when you deploy the agent at scale where you want to make sure that you have the appropriate coverage for your systems when you're on the cloud you run Cloud Discovery you will have a set of VM virtual machine instances records and part of your goal is to have 100 coverage with an agent maybe with horizontal Discovery doesn't matter but to have that CI server in the cmdb and to have that relationship between the VM instance from cloud Discovery and the CI server so for that investing the bigquery Builder if we have time I can go back to that you just select a VM instance record plus say computer record create the relationship and select the records where there is no relationship I also did the other way around to see which systems that are identified as VMS with a virtual flag on is virtual on that do not have a relationship to a VM instance and I say I have quite a few actually so we'll have to go back to that and last thing I added just for myself duplicate agents when an agent is reprovisioned into the same system I may have a duplicate record because the identification for that agent is the agent ID which is stored in the cache directory of the agent so if you wipe out everything like you uninstall completely reagent and you reinstall it will have a duplicate so think about that we do have a scheduled job I think every 30 days we clean up all of the agents that are down and you can modify that if you want to but still have a look at that as part of your regular cmdb Health activities foreign one question that was kind of a follow-up from the first section is is the Json load from the client device to the mid server encrypted uh all end-to-end um so not into and let me rephrase it each segment between the agent and the mid and between the mid and the instance all of that is encrypted yes by default thanks everyone by default and in the doc all about TLS I mentioned how you can enable TLS 1.3 between the agent and the mid how you can disable specific ciphers and algorithms etc etc how you can play with load balancers especially on cloud you have I mean obviously on-prem as well but many ways to configure a load balancer so it gives you some examples on how to make it happen got it thank you and then one more question before you move on just can you explain the concept of duplicate agents one more time sure I have one here the agents is identified using the agent ID agent ID I don't show it here I will likely show it on my list view but it doesn't matter agent ID that's the one here that thing here is stored by the agent it is generated by the agent and stored in the cache directory of the agent this is what we have by default when you go to the cmdb CI the CI class manager that's what will be used for identification which means if you delete that file because you did some maintenance you wanted to uninstall the agent and install a new one over there you will have a new agent recorder this is what I just did a couple of days ago on that system and I have a Windows CI that is here as we are here we just present you quickly the attributes you can see we collect the hardware asset information operating system information related lists or all of the serial numbers storage devices partitions IP information running processes tsp connections etc etc software installations okay but you see here I do have two agents one that is done because it did not connect back for for a while uh and it was replaced by the second one over time this may accumulate so you don't want to get that necessarily it's not such a problem if you if you don't have any issue with your reporting but keep that in mind if you uninstall and reinstall the agent that will create a duplicate are we good now I believe so uh if there's any further questions on that topic we can cover that offline um so thank you all right yes you see this one is marked us down so automation uh let's start with an easy one windows as easy one I have a new nuclear obviously it is but let's reconnect here I created a public Repository I was awarded with a notification from security at service now but that's okay we all find I put the link here in the chat here you go to Scripts very good uh no no sorry that's one for Linux this one PS1 all right uh depending on how you're all out those agents can be with a CCM tanium part of a master image Etc many options offer but I give you some simple steps with Powershell for example um to make it happen so you want to assign the API key please see with your Security Group how you can handle that API key securely okay do not try not to start an encrypted at rest your target for the mid server or load balancer obviously version of the agent and from here as we run it we download the agent from the installer servicenow.com Repository my suggestion always is to do that step once so that you can go back to your infrastructure to team for Linux and windows making sure that the MSI RPM that file emits for security requirements from your company you double check the signature that we sign with servicenow certificate just to make sure that the integrity was not compromised and then you embed that into your own solution just for the sake of these examples here I did all the processors at once then I want to run my MSI exec install the agent and here I want to use the system account for that and that is the thing if you deploy that on The Irregular system no problem the service will be started with automatic delayed I think that's why it's named on Windows Windows services but if you want to put that on a master image well you may have an issue with with uh starting the agent because that agent will start generate a unique ID as I mentioned before that unique ID in the cache but then every time you clone it that ID will remain there and so instead of having duplicate CIS you will end up with mangling so an agent will create will create multiple Records On The Host One agent for multiple hosts it is not good so for that you can easily as you deploy the agent not start the service as you deploy the agent as you install it switch per service to manual you want to test it sure you have a comments here but then you have to clean them up stop the service and remove that agent ID from the cache directory and the cache is under program data not in program files and then as you clone your VM whenever you have a clone tripod first boot whatever just make sure that you turn back the agent service on and set it up to automatic on my windows here on Azure I have this shell um let's see just yes there we go my list of commands I just want that I did that before it takes a bit of time on Azure so I will skip that but this is how I spin up my Adrians on all of my systems on azure on Windows as we are talking about that I also wrote a very simple script to deploy OS query very similar process I force the configuration file um and from that that will enable software metering for some use cases so if you're looking on options to identify consumption of licensed software on end user endpoints you can use this mechanism to track that software usage you spin up the agent and get OS query running as a demon as documented and then you go with your recla mission rules on service now instance that will then store the data into servicenow for software usage metering if you want to see what it looks like software usage over here you should see something like this and FYI for some use case that example it is it on the same system yeah these ones here on that Windows 11 Pro on the same system you can see multiple users so it is per user per product and per configuration item that you will have that data collection collected all right we've seen what okay whatever I was just a second ago yeah do not sign up whatever okay so uh you can use Powershell for this but in your Azure environment very likely they have um some other ways to maintain those packages maybe they use um the extension the custom script extension that that comes with azure so you can use this easy mechanism to make it happen 240 for me let's go with Linux I have posted a ansible role on Linux ansible is a very nice solution that enforces an item buttons I think that's how we pronounce that thing meaning that it will enforce the state the desired state of resources on the target systems and if nothing has to be changed it will not change anything so it's very efficient I do my best with a time I had to work on that to set up the repository here with a basic information I use a volt and simple Vault where I store that information encrypted so my API key even if it is encrypted as I watch uh it is never handled in clear text in my in my commands in my repository I mean um and to show you here I do have my inventory Suzy Max of course set up with my resources well it was enabled whatever okay um I do have some Linux Centos Center a stream of course Rel Suzy Debian Ubuntu on some systems they will use the URL to download the agent on some others they will use a local yum Repository I don't have a satellite deployed there but I spent up a smaller yum repository for that and in some of us I will just push the file from NC bowler using sudo I handle this pseudo configuration we get to that in a second I do have some mac as well and I have an old piece on Windows that I haven't tested recently so I if you're looking for Windows in particular there is another repository contribution on the NC ball that I would recommend that is very thorough over here okay put the link in the chat so it's not for me but one of our contributors posted all this how NC World works well it will take that inventory in command line [Music] and what do we have a ACC Linux I want to First deploy I mean execute that script on 10 systems in parallel and then just do 50 of whatever is left and you keep going yeah my encrypted file is here and I will apply a role this is the role that I posted on git executing all of that together let's deploy it on quite a few systems here's some Royals Centos Linux Amazon Linux sorry etc etc how many systems do we have up and running should be 23 here foreign it it will run all of these tasks and just to go quick it's recorded so it can go back we'll first get the ansible facts to understand the operating system and and all conditions based on that Linux distribution both some of them I copy the package that I have on that little Bastion host for most of my systems I just skip but that task so I only did it for these two I think foreign and you can see okay it was not changed so actually nothing was done but it keeps going with all the tasks nothing to do with MSI install the agent from OS repostory that was on two systems and another one from local source so we did like a well dpkg forcing the um the local the package on the local file system and a few others downloading uh from the URL install.service.com it keeps going and you see all of these tasks are happening in parallel 10 at a time once we are done with that let's configure the agent service there are many things to do in my example I want to use a specific user not the default one so I will force my user I create the user set up access rights create the parent directories of course at some point I will create the pseudos file I prefer normally using the the drop down directory etc.d that way um I will not hopefully I will not impact or change whatever was there before but maybe in your group they all have everything into one single file so this is why it is very important to keep communication lines open with your system in groups making sure that everything is done correctly you may notice here it's showing changed why that's because I'm changing the mode of a file this is kind of my canary test as we apply the excess rights to the parent directories and subsequent files the face is uh set to one mode but right after that I want a specific file to be in a read-only even for the owner of that file so zero four four zero every task that is marked as okay means nothing was changed but you can see the Sudo is that was edited there once we're done with all of that let's start the service if if it wasn't set up there um we support services agent services from systemd on Linux on all distributions that we officially support so sometimes you need to do a systemd Reload or systemctl reload Daemon you may have noticed here finally the ACC configuration this is and we restarted the service here we go on most systems I had just was changes on the on the access rights except on Suzy Linux because on Suzy Linux this is where I let the API key non-encrypted as you can see here just put that flag there in my config file I will not show that it's recorded I have both values for with an API key encrypted and with the APA key unencrypted so this is just to show you the example as you deploy your agent with the API key what you don't want is to have that config file constantly updated every single time you run ansible you don't want that so make sure that you stick to this principles of idents let's have a break here I need some water any question on the chat yeah Severn thank you this is awesome um quick question do you have a version of this for Windows you have an ansible link on GitHub for Windows so I did publish something a long long time ago and from a forward Galaxy which is likely not working anymore and honestly I give up on that after after a few minutes um ending with winr I am on Windows but I send another link from one of our contributors and he was able to get a good very good achievement on deploying that using Windows so I highly recommend YouTube and he even documented the steps that's that's very kind of him so yes he did a lot here to make it happen on Windows yes all of his gotchas yes yes I remember I had to do that stuff bye okay anyways so thanks to him for all of his work his dedication to get ansible working on Windows so that's part of the link that you had sent me earlier today right so we're gonna be posting all these links into the chat section um in the coming minutes here just as a recap for everybody before they put in the chat already but maybe that's okay we're going to recap everything uh towards the end here um secondarily um is there a uh so question was um Thomas found a document about installing ACC and air gap networks on your share but is there any documentation on our doc site for setting this up all right so we do have um this solution where all of these scripts that we use to execute to extract data can be executed and put it at once into a single file and then have a manual upload into servicenow this is great it works very well for a small set of systems but it is quite heavy on the maintenance if uh how we say if your groups who do operate those air gap networks do not have the Automation in peace or even the knowledge on how they operate on these systems so we cannot hear just guess how things are done if if your security officers use a USB stick do they use a KVM we still have this nowadays uh keyboard VGA Mouse um do they connect to each system individually do they have a dreamhost these are all the questions you need to address in order to get via cap solution working at scale I'm very happy to take that offline we can we can clearly share with you the uh the basic steps to get things done manually But please understand that the level of effort to make it happen for real in your environment clearly requires collaboration from your security officers and the people who operate those Networks all right thank you Severin um another question is um can you explain how uh we can update um publicly facing um agents for for computers that are off-site so is that like you know for example is that using a publicly facing internet mid-server so what is the process to update the agents for uh that you know that are off-site oh yes so generally speaking for um for regular updates let's say in your normal it environment how you pushed via the package you used this kind of tools a CCM tanyon bigfix Etc my recommendation is stick to that for the upgrade if you are um and by the way if you upgrade you just do a single a simple MSI exec slash I with a package name and that will proceed with your grade you do not need even on Windows you do not need to uninstall and reinstall the agent just to handle an upgrade but now we do have some situations where for sure you do not have any way to access the device remotely you have a situation sometimes for iot or in some places where you really need someone physically to go to every single office um you know every single sales spawned to to run some procedure so you can have a selective self upgrade that we support with the agent getting into that here what's happening with my mouse okay seven minutes left where if I pick up an old one here or DC very nice ah okay you can upgrade the agent from there but there's a gotcha on Windows you have something called UAC user access controls whenever you try to upgrade or even install a regular MSI you and you run that as a non-administrator user you will see that pop-up window asking you for admin credentials that doesn't go well for self-service capability so the only way we can support that agent upgrade selective self upgrade capability is to run the agent as system account the local system account which we support just make sure that you put the right parameters as part of your installation to run the agent configured that way so in the documentation in the release notes I mean on the store app I documented here all of the flags for the MSI so go back to that use system and from there you can trigger the software capability and you have a question uh one more question uh before we wrap up here um can you please explain how we can use custom script extension in Azure for installing ACC clients Customs extension in Azure well this this is what I covered before you you will check with your team who handles the storage for that uh to uh to push that script and then you associate your VM to that um it's got an extension um not an application should be something else um but yeah you you will check with your with your team who operates the Azure environment to make it happen and by the way this kind of scripts I also uploaded one on that Repository here for Linux that you can embed in a SoundCloud uh it's uh I missed um whatever that you can in your cloud in it in your cloudinine scripts so something you can assign all the information you want API key hopefully Security will not reach out to me um and it's not the right one you can try but it's not going to work um where here I handle sudo and um all of your information you need all the config files that I store the system CTL I mean systemd with some additional content to make sure that the agent resources will never go beyond what I expect from a third party agent on my infrastructure the ACC yamul um vlr list and we should have stores here you can see the list of commands with sudo it's very small it's two commands that's it of a basic use case all right well thank you seven I'm gonna take the screen back here and wrap up our meeting for today um so thank you seven very much for presenting I thank you all for your questions um really insightful uh what we have for you here and there'll be a link in the chat is um so in addition to this webinar there are lots of additional resources for ACC so we're going to put those links in our chat right now and um please feel free to access these at your convenience and and you know and of course leverage them um so the in The Innovation that you see in servicenow products is largely driven by customer needs by you right so we encourage you to submit your ideas on our idea portal so go to support.servicenow.com ideas to submit your idea or upvote an existing one so once an idea receives 10 upvotes from at least 10 unique customers not 10 people within your account but 10 unique customers it's automatically raised to the attention of our product team for consideration um so our for our call to action today we highly encourage everyone here to visit store.servicenow.com to download the ACC applications to try out ACC in sub production to showcase the value that you've done in sub production to your stakeholders to get them excited and of course we are here for you so feel free to ask questions to servicenow smes use the community as a resource reach out to your account team or leave us your contact information in the survey at the end of this webinar and finally of course share your success story with us we'd love to hear how you're doing and make you a a public success story if you're willing to share now be sure to join us for our next webinar on February 21st where we're going to cover how to gain visibility to Cloud native Technologies you can register to link in the chat and beginning of February my colleague John who was on this call today will be taking over the host role for this webinar series uh so John joined us back in September and we'll be working together uh you know John and I on item visibility and governance this year uh John can you please give yourself an introduction here sure thank you Steve so hi everyone my name is Jamar de Luigi and as they would say I'm on a bound product manager for item visibility in governance here to servicenow and again I joined in September 2022 so I'm very very excited to be your host for our next webinar and I'm really looking forward to see you all there all right thank you John um I and of course I have thoroughly enjoyed leading these webinars uh you know with my product management colleagues and helping you better understand how to use our Solutions uh so thank you for your continued attendance and as well as your interaction uh so but rest assured you'll be in great hands with John uh so ACC uh is included with icon visibility which is a suite of products that enable you to gain visibility of your entire estate so to learn more about agent client collector and how item visibility can help your organization please reach out to your servicenow account team thank you for for attending today and have a great rest of your day