How can we know which Discovery Credentials are used?

[Veera1986]

Hello All,

In my environment, I have around 75 credential entries (Includes both valid and invalid credentials) in Credential table(discovery_credentials). Can anyone suggest me how to find out which credentials are used for discovery schedules? 

Note: I mean is there any way for finding valid credentials without checking in xml payload manually.

[tim_broberg]

1. If it's failing, for many probe types (SSHCommand is the one I use it for routinely), you will see a credential debug block appear in the ecc_queue input.
2. You can force that block to appear even if things are working by adding a parameter to your ecc_queue output, credentials_debug = true.
3. Passively, you can query the dscy_credentials_affinity table for the mid server and IP in question to find the sys_id of the last credential that worked there. (This affinity will be plugged in next time in the credential_id field of probes for that mid and IP, causing it to try that one first.)
   
       - Tim.

[Rahul Priyadars]

Hi ,

There is an One time effort to clean it.

Open Each CREDS record --> Go to Related List --Discovery IP Affinity.

SORT on Descending Order for each and see its usage..

More Broader Way

Open Credential Affinity table and do a Group By on credential ID . It will give you fair Idea on Usage of records.

Regards

RP

[Appli]

Hi, correct, you will need to check Credential Affinity.

Submit dscy_credentials_affinity.list in filter navigator, search by device IP, open corresponding affinity record and click "Go to credential"

Hope it helps

[Sandeep132 · Accepted solution]

Hi Veera,

On "Discovery Dashboard" you can see a widget with name "Unused Credentials". This widget contains report with list of credentials not used by discovery. You can utilize this report or update the conditions on this report to show the credentials which are being used. 

https://YOURINSTANCE.service-now.com/nav_to.do?uri=%2Fsys_report_template.do%3Fjvar_report_id%3Dde801e94dbb45c90c0c8464e1396199d

On this report you can change the condition from "is not" to "is" for "Sys ID" and you can see the list of credentials which are used.

Hope this helps.

Thanks