SCCM - First Discovered & Most Recent Discovery

[anfield]

I have been looking into what these fields are mapped to in SCCM and it looks like basically first discovered is the same as the CI create date and most recent discovery is very similar to the last modified date.

Can't find this information anywhere in the online docs. Can anyone confirm how these fields are set, or what they are mapped to in SCCM?

[sachin_namjoshi]

There are two fields on CMDB which help identify as to when the CI was discovered.

1. First Discovered - This field gets populated when a CI is created by discovery.

2. Most Recent Discovery -   The field shows the Time-stamp when the CI was last discovered

Usually, theses fields are updated by integrations.

You will have to update your trasnform map, scripts to update these fields for your data source.

Regards,

Sachin

[anfield]

What field is most recent discovery mapped to? Is it last hwscan? I do not see it explicitly listed in the field mappings. It doesnt look like it is being set correctly

[Sagar Gotla]

Hi Anfield,

To answer your question, I want to start it from basic

In any network SCCM scans for hardware according to the interval and time that we specify, most of the time mid night is preferred as it does not effect the efficiency of the network. So when ever SCCM scans, data gets stored in the mid server, and from there we schedule time and interval in the ServiceNow -'Scheduled Import' defining when to export data in to ServiceNow table ( this data includes records related to newly found Hardware and already existing hardware which is scanned again).

So Most recent Discovery is mapped to 'Created' Date

and where as Last hwscan is the field that gets updated with fresh date every time the hardware is scanned according to our specified time interval.

I am attaching a screenshot just to explain it better,

Updated - is the date which specifies when the hardware is last scanned and update in Servicenow

Created - is the date when the hardware is first found and created

SCCM last seen - is the date the hardware is lastly found on the network

If you still have questions let me know I will try to explain it other way around.

Please mark answer as Correct, helpful as appropriate.

Thanks,

Sagar Gotla

[Sumit Maheshwar]

Thanks Sagar for the above response, looking for SCCM last seen, which field/attribute used from SCCM Table to populate in ServiceNow.