Schedule horizontal discovery

A schedule determines what horizontal discovery searches for, when it runs, and which MID Servers are used.

Before you begin

Roles required: admin, discovery_admin

About this task

You can use a Discovery schedule to launch horizontal discovery, which uses probes, sensors, and pattern operations to scan your network for CIs. Use this procedure to create a schedule manually from the Discovery Schedule form. To create a schedule automatically, see Use ITOM guided setup.

Service Mapping also provides a Discovery schedule for top-down discovery. See Create a discovery schedule for an application CI for more information.

Use the Discovery Schedule module in the Discovery application to:
  • Configure device identification by IP address or other identifiers.
  • Determine if credentials are used in device probes.
  • Name the MID Server to use for a particular type of discovery.
  • Create or disable a schedule that controls when the discovery runs in your network.
  • Configure the use of multiple Shazzam probes for load balancing.
  • Configure the use of multiple MID Servers for load balancing.
  • Run a discovery manually.

To create a Discovery schedule:

Procedure

  1. Navigate to Discovery > Discovery Schedules and create a new record.
  2. Complete the Discovery Schedule form, using the fields in the table.
  3. Right-click in the header of the record and select Save from the context menu.
  4. To create a range of IP addresses to discover, click Quick Ranges under Related Links.
    Figure 1. Discovery schedule
    Discovery schedule
    Table 1. Discovery Schedule Form
    Field Description
    Name Enter a unique, descriptive name for your schedule.
    Discover Select one of the following scan types:
    • Configuration items: Uses Discovery identifiers to match devices with CIs in the CMDB and update the CMDB appropriately. Perform a simple discovery by selecting a specific MID Server to scan for all protocols (SSH, WMI, and SNMP). Or, perform advanced discoveries with discovery behaviors. When you select a behavior, the MID Server field is not available.
    • IP addresses: Scans devices without the use of credentials. These scans discover all the active IP addresses in the specified range and create device history records, but do not update the CMDB. IP address scans also show multiple IP addresses that are running on a single device. Identify devices by class and by type, such as Windows computers and Cisco network gear. The Max range size Shazzam probe property determines the maximum number of IP addresses Shazzam scans. See Configure Shazzam probe parameters and payload size for details.
    • Networks: Discovers IP networks (routers and switches). Results from this search are used to populate the IP Network [cmdb_ci_ip_network] table in Discovery > IP Networks with a list of IP addresses and network masks. Network scans update routers and layer 3 switches in the CMDB.
    • Service: Discovers services for the Service Mapping application. See Create a discovery schedule for an application CI for instructions.
    • Serverless: Finds CIs without needing to run discovery on a host, or CIs on a proxy host that is already in the CMDB. See Serverless discovery for more information.
    • Cloud application: Discovers only the cloud resources for the patterns that you specify. See Run cloud application discovery for instructions.
    • Cloud resources: Discovers resources on AWS and Azure clouds. This option only appears when you run discovery on a service account. You cannot select it from a new Discovery schedule.
    MID Server selection method Select the method that Discovery uses to select a MID Server:
    • Auto-Select MID Server: Allow Discovery to select the MID Server automatically based on the Discovery IP Ranges you configure. To find a matching MID Server, you must configure MID Servers to use:
      • The Discovery application, or ALL applications. This setting authorizes the MID Server access from Discovery.
      • The IP Range that includes the ranges you configure on the Discovery Schedule.
    • Specific MID Cluster: Use a preconfigured cluster of MID Servers. Select the cluster. You are not required to specify one member of the cluster. The MID Server cannot be part of multiple clusters, such as one that supports load balancing and one that supports failover. You can add any cluster regardless of the application that the MID Servers are assigned to. When you select the cluster, the Discovery application is automatically added when it does not exist for the MID Servers in the cluster.
    • Specific MID Server: Use only one MID Server. If that MID Server is part of a cluster, only that MID Server is used. The cluster is not used. You can add any MID Server regardless of the application it is assigned to. The Discovery application is automatically added when it is not already assigned for the MID Server you select. You can assign a specific MID Server for all types of Discover scans except Service.
    • Use Behavior: Use a behavior when a single schedule requires the use of multiple MID Servers to perform any of the following activities:
      • Scans requiring multiple Windows credentials.
      • A schedule that must execute two or more particular protocols (SNMP, SSH, or WMI) using more than one MID Server.
      • Load balancing for large discoveries where a single MID Server would be inadequate.
      • Scanning multiple domains.
    Note: The Discovery schedule enforces domain separation. The MID Servers that are available for selection are limited to the same domain of the user who is configuring the schedule.

    See MID Server selection sequence for Discovery for additional information.

    MID Server Select the MID Server to use for this schedule. This field is available if MID Server selection method is set to Specific MID Server, or if you discover IP addresses, networks, or web services.

    To verify that the MID Server you selected is up and validated, look at the MID Server dashboard.

    MID Server Cluster Select the MID Server cluster to use for this schedule. This field is available if MID Server selection method is set to Specific MID Cluster.
    Behavior Select a behavior configured for the MID Servers in your network.

    This field is available only if MID Server selection method is set to Use Behavior.

    Active Select the check box to enable this schedule. If you clear the check box, the schedule is disabled, but you can still run a discovery manually from this form, using the configured values.
    Location Choose a location to assign to the CIs that the schedule discovers. If this field is blank, then no location is assigned.
    Max run time Set a time limit for running this schedule. When the configured time elapses, the remaining tasks for the discovery are canceled, even if the scan is not complete. Use this field to limit system load to a desirable time window. If no value is entered in this field, this schedule runs until complete.
    Run and related fields Determines the run schedule of the discovery. Configure the frequency in the Run field and the other fields that appear to specify an exact time.
    Note: The run time always uses the system time zone. If you add the optional Run as tz field, it has no effect on the actual runtime.
    Include alive Select this check box to include alive devices, which are devices that have at least one port that responds to the scan, but no open ports. Discovery knows that there is a device there, but has no information about it. If this check box is cleared, Discovery returns all active devices, which are devices that have at least one open port.
    Log state changes Select this check box to create a log entry every time the state changes during a discovery, such as a device going from Active to Classifying. View the discovery states from the Discovery Devices related list on the Discovery Status form. The Completed activity and Current activity fields display the states.
    Shazzam batch size Enter the number of IP addresses that each Shazzam probe can scan. Dividing the IP addresses into batches improves performance by allowing classification for each batch to begin after the batch completes. rather than after all IP addresses have been scanned. The probes run sequentially. For example, the value is set to 1000 and a discovery scans 10,000 IP addresses using a single MID Server. It creates 10 Shazzam probes with each probe scanning 1000 IP addresses. By default, the batch size is 5000. A UI policy enforces a minimum batch size of 256 because batch sizes below 256 IP addresses do not benefit from clustering. The policy converts any value below 256 to a value of zero.

    The value for this field cannot exceed the value defined in the maximum range size property for the Shazzam probe.

    Shazzam cluster support Select the check box to distribute Shazzam processing among multiple MID Servers in a cluster and improve performance. Works with the Shazzam batch size. For example, if the cluster contains 100,000 IP addresses and there are 10 MID Server Schedules, every MID Server processes 10,000 addresses (100,000 IP Addresses/10 MID Servers). If the Shazzam batch size contains the default 5,000 IP addresses per probe, a Schedule runs two Shazzam probes per MID Server (10,000 IP addresses/5,000 per batch). This field is available starting with the Eureka release.
    Use SNMP Version Use this field to designate the SNMP version to use for this discovery. Valid options are v1/v2c, v3, or All.
    Quick ranges Define IP addresses and address ranges to scan by entering IP addresses in multiple formats (network, range, or list) in a single, comma-delimited string. For more information, see Create a Quick IP range for a Discovery schedule.
    Discover now Use this link to immediately start this Discovery.
    Related Lists:
    IP Ranges This related list defines the ranges of IP addresses to scan with this schedule. If you are using a simple CI scan (no behaviors), use this related list to define the IP addresses to discover.
    Discovery Range Sets This related list defines each range set in a schedule to scan by one or more Shazzam probes.
    Discovery Status This related list displays the results of current and past schedule runs.
    Table 2. Discovery schedule run options
    Run option Description
    Daily Runs every day. Use the Time field to select the time of day this discovery runs.
    Weekly Runs on one designated day of each week. Use the Time field to select the time of day this discovery runs.
    Monthly Runs on one designated day of each month. Use the Day field to select the day of the month. Use the Time field to select the time of day this discovery runs. If the designated day does not occur in the month, the schedule does not run that month. For example, if you designate day 30, the schedule does not run in February.
    Periodically Runs every designated period of time. Use the Repeat Interval field to define the period of time in days, hours, minutes and seconds. The first discovery runs at the point in time defined in the Starting field. The subsequent discoveries run after each Repeat Interval period passes.
    Once Run one time as designated by the date and time defined in the Starting field.
    On Demand Does not run on a schedule. Click the Discover now link to run this discovery.
    Weekdays Runs every Monday, Tuesday, Wednesday, Thursday, and Friday. Use the Time field to select the time of day.
    Weekends Runs every Saturday and Sunday. Use the Time field to select the time of day.
    Month Last Day Run the last day of every month. Use the Time field to select the time of day.
    Calendar Quarter End Runs on March 31, June 30, September 30, and December 31. Use the Time field to select the time of day. To change these dates, modify the script include DiscoveryScheduleRunType.
    After Discovery Allows you to sequentially stagger the schedule. Use this option to run this schedule after the Discovery designated in the Run after field finishes. Check the Even if canceled check box to designate that this discovery should run even if the Run after Discovery is canceled before it finishes.
    • This option is not valid when the Discovery is started via DiscoverNow, or when using the Discover CI feature.
    • You cannot designate an inactive Discovery schedule.
    • You cannot create a loop by designating the run after Discovery to be the same Discovery.
    • This Discovery does not run if the Run after discovery does not finish, with the exception that the Even if canceled box is checked and the Discovery is canceled.

What to do next

If you selected a specific MID Server, go to the MID Server dashboard to verify that the MID Server you select is up and validated.