Query on Discovery Schedule Best Practice

shank1 · ‎06-20-2020

Hello,

1. Assuming there is 1 mid server and a total of 1200 to be scanned, can I create multiple 'Discovery IP Ranges' in a single Discovery Schedule <or> split the IP's into multiple Discovery Schedules.

2. Assuming there are 5K devices, 1 mid server and I create 5 Discovery Schedules, each one targeting 1K IP's. Here should I run them sequentially using the 'Run After' or can I run all the schedules at once.

PS. I know that best practice depends on the various factors, but I am just looking for the above scenario.

Thanks

Shanks

PV MADHU · ‎06-20-2020

Hello Shanks,

Q1 : Assuming there is 1 mid server and a total of 1200 to be scanned, can I create multiple 'Discovery IP Ranges' in a single Discovery Schedule <or> split the IP's into multiple Discovery Schedules.

A :

Step 1: Identify the IP Subnet Range if they contain all devices ( Windows , SSH , SNMP , etc )

Step 2 : If yes then consider running them as per the device types else ask your network team the appropriate IP Ranges for respective devices . ensure that discovery doesn't run on the same IP's in each schedules.

B:

The Best practice is to evaluate the average time taken for each schedule and run them subsequently and also equally important to consider the below factors and decide accordingly .

The Performance depends on the hardware configurations,
Devices types your are discovering and corresponding probes /patterns launched
Evaluate the numbers of threads launched on the host machine and impact of the CPU on the host machine
Consider increasing JVM memory if Discovery jobs are running slow

Note : Please mark this accepted & helpful if it answered your question.

View solution in original post

Ashutosh Munot1 · ‎06-21-2020

HI,

Here is what i do always:

1. Assuming there is 1 mid server and a total of 1200 to be scanned, can I create multiple 'Discovery IP Ranges' in a single Discovery Schedule <or> split the IP's into multiple Discovery Schedules.

Now the fact you have one MID server and 1200 devices i will first check which devices those are? Servers, SNMP, CIM,Application,etc. Because each device makes use of protocols and discover those. for example Windows Server which uses Powershell can cause the CPU utilisation to go to 100% quickly and may create issues for discovery. So i will suggest you to make use of Behaviors as you only have one MID server and device the ranges in to like 5 6 ranges. So the MID Server will remain up and running.

2. Assuming there are 5K devices, 1 mid server and I create 5 Discovery Schedules, each one targeting 1K IP's. Here should I run them sequentially using the 'Run After' or can I run all the schedules at once.

Again 1K device per schedule will be more and can cause issue if the MID is not powerfull. So make a smart choice and device the subnets properly and make use of behaviors to discover the devices.

Thanks,
Ashutosh

shank1 · ‎06-24-2020

Yes Ashutosh, started leveraging Behaviors aswell now. Thanks.