About discovery phases

[newhand]

Hi everyone!

I am learning about discovery, and I know there are four phases during the discovery process: Scanning, Classification, Identification, and Exploration.

I understand what each phase does, but I can't understand why the Identification phase runs before the Exploration phase.

By running the Exploration phase, we can gather more information about the CI (Configuration Item), and these information may be used by the Identification phase.

Therefore, I think the Exploration phase should run before the Identification phase.

Can someone tell me why?

Thanks!

[VS]

Hi,

In ServiceNow Discovery, the Identification phase typically runs before the Exploration phase to establish a foundation for effective data collection and analysis. Here's why:

Establishing a baseline: During the Identification phase, ServiceNow Discovery aims to identify and classify the various devices, systems, and applications present in an IT infrastructure. This step helps create a baseline understanding of the environment and its components.

Data source identification: By identifying the devices and systems, ServiceNow Discovery can determine the potential data sources that can be leveraged for exploration and further analysis. It allows the tool to gather information from these sources during the subsequent Exploration phase.

Dependency mapping: Identification involves discovering dependencies and relationships between different devices and systems. This information is crucial for effective exploration as it helps in understanding how various components interact with each other and their dependencies on one another.

Data accuracy and completeness: Running the Identification phase first ensures that the collected data during the Exploration phase is more accurate and comprehensive. It provides a structured approach to gather relevant information and reduces the chances of missing critical components during data collection.

Efficiency and focus: By initially focusing on identification, ServiceNow Discovery can streamline the subsequent Exploration phase. It allows the tool to prioritize data collection efforts on the identified devices and systems, optimizing resource allocation and minimizing redundant or unnecessary exploration activities.

Overall, running the Identification phase before the Exploration phase in ServiceNow Discovery helps establish a solid foundation, gather accurate and comprehensive data, and streamline the subsequent analysis and exploration processes.

Hope this helps.

Thanks,

VS

[pratiksha5]

Hi, 

Identification is meant for checking if the given CI is already present in the CMDB or not. While exploration means getting more information. 

Think like this: When you want to go to someone's house you will know and see if someone answers or not (that's port scanning), and when opens you know who is it (classification: type of device Windows, Linux ) Then you will know if you already know that person or maybe not (identification), after that you can know more that is exploration.  Best of luck for your learning process. 

[newhand]

@VS @pratiksha5 
Thanks for your replies.

Identification is meant for checking if the given CI is already present in the CMDB or not. While exploration means getting more information.      

↑During the Identification phases, is there already enough information for IRE to check if the given CI is already present in the CMDB or not?

If some attributes used in the Identification rules are populated in the Exploration phase, I believe the IRE may not function as expected. Alternatively, we should be aware of which attributes cannot be used in the Identification rules because they are populated after the Identification phase？

[newhand]

@pratiksha5 @VS 

Thanks for your replies.

Identification is meant for checking if the given CI is already present in the CMDB or not. While exploration means getting more information.      

↑During the Identification phases, is there already enough information for IRE to check if the given CI is already present in the CMDB or not?

If some attributes used in the Identification rules are populated in the Exploration phase, I believe the IRE may not function as expected. Alternatively, we should be aware of which attributes cannot be used in the Identification rules because they are populated after the Identification phase？