Harish Bainsla
Kilo Patron
Kilo Patron

There are Four Phases of Discovery

HarishBainsla_0-1733121561729.png

 

Lets do practical to understand in better way.

> Install mid server and make sure it is up and running

> Go to discovery Schedule and click on quick discovery , Provide ip and select mid server.

1. Scanning Phase

> In this phase TCP and UDP IP port are scanned by discovery to determine which port is open and also try to get response from the open port 

> It is also called Shazam  phase

HarishBainsla_1-1733121928871.png

Now if you open it you will see which port is open and which are refused as shown below (open shazam input xml)

HarishBainsla_2-1733122197225.png

 

2. Classification Phase

> Based on port no  it will classify which type of machine it is like Windows or Linux. as above port no is 135 so it will classify as windows

HarishBainsla_3-1733122452145.png

Now based on classification pattern were launched to fetch information about machine.

 

3. Identification Phase 

> In this phase it will check weather the ci is already created on cmdb_ci table or not .

> In this phase IRE rule is triggered

> It prevent duplicates and ensure accurate CMDB entries.

 

4. Exploration Phase

 > In this phase discovery collects in depth information about the device and their relationships.

 

You can see all these phases in ECC Queue logs 

 

 

Now in Device Section you find your device which is discovered

HarishBainsla_5-1733123321298.png

 

Now in Discovery logs you can find error if there is any error occur while discovery is running.

Now to validate weather ci is discovered or not go to cmdb_ci table and check.

HarishBainsla_6-1733123575104.png

 

 

Thank You

LinkedIn : https://www.linkedin.com/in/harish-baisla-8895aa22a/

ServiceNow Community Rising Star 2024

 

 

 

Comments
khushik
Tera Contributor

So Helpful 

Abhinav_Kumar
Tera Explorer

Great Explanation

Version history
Last update:
‎12-01-2024 11:17 PM
Updated by:
Contributors