Discovery completed activities explanation

Eitan_B
Tera Expert

Can someone please explain what these Discovery activities Mean:

 

Empty

Active

 Active, couldn't classify , no WMI

Active, couldn't classify

Active, Windows Cluster VIP

 Alive, not active, not classified

 Classified

 Classified, couldn't identify

 Created CI

 Identified CI

 Identified, ignored extra IP

 Updated CI

1 ACCEPTED SOLUTION

sachin_namjoshi
Kilo Patron
Kilo Patron

The Devices related list in the Discovery Status form provides a summary list of all the devices scanned.

 

Empty

--> Your Discovery Logs indicate that it matched on primary keys e.g serial number, so your there isn't a problem with the Identification rules. Either you have a CI in the CMDB class table that doesn't have a name (hence empty) or you have something deleting your CI during the Discovery run.

 

Active

--> This means There were classification ports open during discovery.

 

Active, couldn't classify , no WMI

 

--> This means  port was open but when discovery tried to talk WMI no response was given.

 

Active, couldn't classify

--> This means  classification ports are open but when discovery tried to authenticate it failed

 

Active, Windows Cluster VIP

--> This message comes as part of the Windows cluster discovery  which means that discovery classifies the device correctly but CI is not created.

 

Alive, not active, not classified

--> This means Classification ports are open but discovery got some level of response such as refused . 

 

Classified

--> When Discovery scans for IP addresses only (without credentials or identifiers), no updates are made to the CMDB. All IP addresses discovered appear on this list, including multiple IPs on the same device. The results of IP address scans include slightly different information than the results of a CI scan. Since there is no CMDB activity associated with the IP address scan, the Completed activity column displays only the classification status.

Possible statuses are:
  • Classified
  • Unclassified
  • Alive, not classified

Classified, couldn't identify

 

--> You need to configure a CI Identity probe that is triggered by your classifier.

 

Created CI

 

--> This means discovery run was successful and it created CI in CMDB.

Identified CI

--> This means discovery run identified CI as per your identifier configuration.The CI Identification phase is where Discovery attempts to determine whether the target device that is being discovered already has a record in the CMDB. If the answer is yes, then Discovery continues by launching the exploration probes. If there answer is no, then Discovery creates a record for it in the CMDB before launching the exploration probes. 

 

Identified, ignored extra IP

 

--> This means While discovering, discovery is scanning the same machine again which should not happen. This can be minimized if you enable an identifier that looks for just the name and give it the highest priority.

 

Updated CI

 

--> This means discovery run was successful and it updated existing CI in CMDB.

 

Regards,

Sachin

View solution in original post

7 REPLIES 7

Ashutosh Munot1
Kilo Patron
Kilo Patron

Hi,

Few are below:

Created CI : Means CI is created in CMDB

update CI : means CI is updated in CMDB

identified CI : it means CI was identified by identifiers and will be created of updated.

Classified : No CMDB update made in this phase. Only the CI was classified

Like:

  • Classified
  • Unclassified
  • Alive, not classified

Classified, could n't identify: This means the CI was classifed but identification phase failed where identifiers where not able to identify this.

 Identified, ignored extra IP : If you device has multiple IP address like Windows Server has multiple NIC in same range then it will discovery the CI with on IP and if the other IP is seen then it will mark it as identified, ignored extra IP. meaning one device is discovered once in one schedule.

Active, couldn't classify , no WMI : There is no WMI connection for that windows server. Meaning port is closed 135 or firewall is blocking it or wmi service is not available.

Active, couldn't classify: This means credentials are not authenticated against this device. Shazzam probes has returned the probes as open but we can authenticate.

Empty: This means the records is deleted or no reference found by discovery.

Active, Windows Cluster VIP : That is expected. It is a virtual IP. There's really nothing further to classify at that point. As long as the windows nodes are Discovered, you'll have your Windows clusters discovered just fine.


Thanks,
Ashutosh

Thanks to you  Ashutosh and Satchin,

 

But I'm wondering what is the meaning of Classified but Disabled? The counts are pretty high and I don't know if this affects something. Can we just ignore it? How can we fix it?

find_real_file.png

Hi,

This means that the devices will not propagate the discovery to lower levels. You should not ignore them.


Thanks,
Ashutosh