Partially Exclude CI From Discovery?

[amoss98]

Hi all,

Needing some advice how to tackle a scenario that I am encountering on our network. We have various types of devices such as UPS devices where they are discovered via SNMP but also have other interfaces such as an HTTP GUI or an SSH shell available. Is it possible to exclude these devices from being probed on the other ports? For example, we have no plans to provide access to the UPS devices via SSH however, the failed login messages generate a lot of extra noise.

I'm familiar with the ability to exclude IPs in a range set but not sure how to go about only discovering a device one specific way.

Thanks for the help.

[Amit Gujarathi]

HI @amoss98 ,
I trust you are doing fine.

Within the discovery options, you can define which protocols and ports should be used for device discovery.

For example, to exclude SSH from being used for device discovery on your UPS devices, you could create a custom discovery schedule and specify only the SNMP protocol and port for device discovery. This would ensure that only SNMP is used to discover and communicate with the UPS devices, while SSH login failures are no longer generated.

Here's an example of how you could create a custom discovery schedule with SNMP-only options in ServiceNow:

1. In the ServiceNow interface, navigate to Discovery > Schedules.

2. Click the New button to create a new schedule.

3. Set a name and description for your new discovery schedule.

4. In the Discovery Options tab, expand the Device Discovery section.

5. Click the Add button next to the Protocols field.

6. Select SNMP from the Protocol list.

7. Click the Add button next to the Ports field.

8. Enter the SNMP port number (typically 161) in the Port field.

9. Save your changes and activate the new discovery schedule.

By using this custom discovery schedule, ServiceNow will only use SNMP to discover devices and exclude other protocols like SSH for the UPS devices.