Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.

Create or modify a probe

Log in to subscribe to topics and get notified when content changes.

Create or modify a probe

Create a new probe to discover additional CIs or modify an existing probe to collect additional information. After you create or modify a probe, test it.

Before you begin

Role required: admin
Important: You need an advanced knowledge of scripting to modify probes or their associated sensors. Many existing probes provide parameters that you can set, rather than modifying the probe itself. See Set probe parameters for more information.


  1. Navigate to Discovery > Discovery Definition > Probes.
  2. Click the name of the probe that you want to modify.
  3. Modify the form fields (see table).
    Field Description
    Probe type Select the probe for the operating system of the device it will query.
    • CIM Probe: Select this probe type to query a CIM server using WBEM protocols.
    • Multiprobe: Select this probe type to run one or more simple probes of any type or mix probes of different types. This type of probe can make several queries simultaneously that return all the results at the same time. You cannot add multiprobes to other multiprobes.
    • Probe: Select this generic type to define a probe class. Specify the name of the probe class in the ECC queue topic field.
    • SNMP Probe: Select this probe type for network devices, such as routers.
    • WMIRunner Probe: Select this probe type for Windows devices.
    ECC queue topic Enter a descriptive term for the function of the probe. The probe uses this label as the Topic field for incoming ECC queue messages. The term does not have to be unique. For example, all the UNIX probes might have an ECC queue topic value of SSHCommand.
    By default, probes use the following ECC queue topics:
    • CimProbe
    • Multiprobe
    • Powershell probe
    • SCPRelay
    • SSHCommand
    • SNMP
    • WMIRunner
    ECC queue name Enter either a descriptive name for human use, or the actual command the probe is to run. For example, if the value in the ECC queue topic field is SSHCommand, then enter the actual shell command to run in this field.
    Cache results Select this option to cache this probe's results to improve overall discovery performance. The probe results cache should be enabled only for those probes and sensors whose output is unlikely to change. For example, the Linux – CPU sensor is cached because CPU information seldom changes. The cache is turned on by default for base system probes and sensors whose output is unlikely to change.
    Warning: Do not turn on the cache for classification and identification probes. Furthermore, do not turn on the cache for probes that trigger additional probes because this may prevent them from being triggered.
    Classic Mode Select this option to cache this probe's results in the Starting in Fuji, select this option to debug the post-processing script on the ServiceNow instance instead of the MID Server. This mode is only valid if a post-processor script exists. Use the Classic mode to debug post-processing scripts in the test environment. ServiceNow does not recommend use of the Classic mode in the production environment.
    Post processor script Define an optional post-processing script that runs on the MID Server. The script accepts probe results as an input and outputs a JSON string that is sent back to the instance for a sensor to use as input. Use this type of script to accomplish tasks like parsing data.
    All probe post-processing scripts and their corresponding sensors have access to the following global variables:
    • current: Sets the attribute to current. Same functionality that exists in sensors. They are attributes of the device that is discovered.
    • related_data: Any additional data to be passed from the probes post-processing scripts, such as related_list.
    All probe post-processing scripts and their corresponding sensors have access to the following methods:
    • log(string): Logs the string to the MID Server and the ServiceNow instance log files.
    • getParameter(param): Gets the parameter from the ECC queue payload.
  4. Right-click the form header and select Save.
  5. Modify these related lists if necessary.
    Related list Description
    Probe Parameters Parameters that control the functionality of the probe. See Set probe parameters for instructions.
    Sensors that react to this probe or Sensors The sensors that this probe utilizes.
    Included by MultiProbe If this probe is included with other probes as a MultiProbe.
    MultiSensor Scripts Scripts that run for multiple sensors.
    Versions The version of the probe. If the State is Current, the probe is the most up to date with your version of the instance. If not, you do not have the most current version and you might need to realign it. See Align versions of customized probes and sensors for instructions.
  6. Click Test probe.
  7. On the Test Probe window, enter the IP address of the target and select the MID Server. Only Up and Validated MID Servers are able to be selected.
  8. Click OK.
  9. Check the ECC Queue for the MID Server to see the results.

What to do next

Add the probe to the Triggers Probe related list on the appropriate classifier. See Create a Discovery CI classification for a description of the fields and related lists on the classifier form.