Discovery Help (Exclude Computers)

[arobertson]

Hi All,

We are soon to release Discovery into production, but have one issue that I require assistance with.

Last night i ran a full discovery across our estate using a WMI only behavior, because as at present we are just trying to pick up certain servers. This morning it has created/updated a couple of computer ci's.

I'm aware that it picked these up because they were found on the IP's that we were scanning and that computers fall under WMI as well.

Is there a way I can stop it processing computers?

[prdelong]

You have two options. You can either exclude those IPs or you can deactivate the generic 'Windows' classifier. That is the only one that feeds the cmdb_ci_computer table. Long term, the latter option isn't a great idea since you will be limited to only Windows servers. However for your parameters, merely deactivating should work.

[arobertson]

Thanks,

The problem with excluding IPs, is that its normally done the damage or creating/updating the CMDB before you know the IP to exclude.

[prdelong]

If you want, you can run what's called a "IP address" discovery scan on the same segment. It runs without using credentials but identifies the general type of CI (ie computer, network gear) and doesn't add anything to the CMDB. However, I am not sure if it differentiates between a computer and a server, so it might be of limited use to you.

[arobertson]

Looking into a bit more, it looks like it discovered a wireless access point, could not work out what it was, so created a blank record in the "Computer" table. All the form contained was the IP address.

I don't think, we are ever going to discover computers. Maybe I could just point the Windows classifier to another table?