Discovery : How to check if an IP is scanned in a Discovery Schedule?

[Benoit Crestey]

How is it possible to check if one or multiple IPs are part of one or multiple Discovery Schedules?

Use cases

• Use Case 1 : As a Discovery Administrator, I would like to know if a list of IP associated to servers should be discovered,
  • The process of checking one by one IPs is very long.
  • Some customers have thousands of IP Ranges defined
• Use Case 2 : As a Discovery Administrator, I would like to know if an IP might be associated to different Discovery Schedules.
  • Also can be used to know if IPs are covered before deactivating a specific Discovery Schedule

Limitations

• Doesn't support exclusions
  • It is possible to exclude specific IPs, in the Discovery Schedule, on the MID or globally

How to Install

• Deploy the attached Update Set (Import XML, and Commit Retrieved Update Set)

How to Use

• Use the UI Page (acces it and use Try)
  
  • I didn't create a menu, as it should be reserved to admin users.
    • However you can create the menu, or a favorite to the page
• Paste one or multiple IPs
• Click on "Search Ips"

Example of result

Thanks to Samuel Fritsch for some fixes

[doug_schulze]

So this will only work for individual IPs and not subnets or IPs within subnets? Either way , very nice work my friend!

[Benoit Crestey]

Hello Doug,

- The input must be individual IPs

- It will test against individual IPs, list of IPs, ranges and networks defined in the Discovery Schedules

I thought to implement other functionalities later :

- The test of network/subnets in input

- The ability to detect overlapping networks/IP that could be defined in different Discovery Schedules

- Improve performance

If anyone think it would create value, please discuss it. I think I can improve, or perhaps we can push to have it in the OOB. Feel free to re-use my code in your projects.