How Service Now discovery is fetching the OS Domain per device?

SenYor
Tera Contributor

‎07-21-2023 02:45 PM

I am doing a multi-source integrations into our Service Now - CMDB and since some of our data sources doesn't have serial number (e.g. Active Directory) as one of the identifiers, we are trying to use the OS Domain attribute that is available as attribute on the cmdb_computer_ci.

 

The problem is I can't seem to find how Service Now discovery picks the OS Domain of the computer that it is scanning and what is the value that we should be getting out of it so that I can compare that to our other data source tools like Tanium and Active Directory.

  • 1,339 Views
4 REPLIES 4

pratiksha5
Mega Sage

‎07-22-2023 05:36 AM

ServiceNow discovery checks IRE for discovering devices. You can check the rules in the ci class manager. There are patterns for every device type. You can check them. 

 

0 Helpfuls

SenYor
Tera Contributor
In response to pratiksha5

‎07-22-2023 08:38 AM

I can't seem to find it or is it possible that OS Domain is not an attribute of the discovery but part of the computer_ci table?

0 Helpfuls

Kiran_T
Giga Guru

‎07-23-2023 10:10 AM

Hi @SenYor 

 

Assuming you are dealing with the Windows servers which are stored as computers in the computer table.

To check how the domain value is being populated you might want to debug the pattern with that ci and test the following steps highlighted.

Kiran_T_1-1690132072979.png

Similarly for linux servers you check the linux server pattern .

 

Regards,
Kiran
0 Helpfuls

Carolyn Rast
Tera Guru

‎07-24-2023 05:19 AM - edited ‎07-24-2023 06:09 AM

@SenYor it depends on how you have configured your system.

OS Domain is set in the 'Windows OS - Servers' pattern based on your system properties - https://docs.servicenow.com/en-US/bundle/utah-it-operations-management/page/product/discovery/refere...

 

OS Domain can come from the host (isWMITrusted - registry) using or network (isDNSTrusted - nslookup).  You choose which to trust:

glide.discovery.hostname.dns_nbt_trusted

glide.discovery.hostname.wmi_trusted

 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1125028

 

glide.discovery.hostname.dns_nbt_trusted: DNS or NetBIOS is trusted host name source: If set to true, trust the device name discovered via DNS or NetBIOS. If checked, CI's host name found via DNS or NBT is used.

glide.discovery.hostname.wmi_trusted: WMI is trusted host name source: If set to true, trust the device name discovered via WMI. If checked, any device name found via WMI is used instead of the name found by a reverse DNS lookup.

 

WMI, SNMP, SSH trusted will be used first when set to true and DNS will just be a fallback

0 Helpfuls