Application patterns for the Agent Client Collector
Summarize
Summary of Application patterns for the Agent Client Collector
Application patterns in the Agent Client Collector (ACC) provide detailed information about applications running on ACC hosts, specifically on servers. These patterns execute after ACC host Discovery is complete and require the ACC to be connected to a MID Server for execution. The patterns are run as ad-hoc checks and support detailed application classification and discovery.
Show less
Prerequisites
- Install the following: Agent Client Collector Framework, Agent Client Collector for Visibility Content, and Discovery plugins.
- Ensure the agent is connected to a MID Server; pattern execution is only supported via MID Server.
- Set the system property snagent.applclassificationbehavior to full, then restart MID Servers.
- In Windows environments, use PowerShell 3.0 or higher.
- Host device roles required:
- Linux/macOS: ServiceNow user with sudoers and nopasswd enabled.
- Windows: Local System user or a local user with appropriate privileges such as Logon as a service, Backup, and Debug Programs.
Managing and Viewing Patterns
- View supported application patterns via All > Pattern Designer > Supported Patterns for ACC. Only application patterns are supported with ACC.
- View executed patterns for an agent through All > Agent Client Collector > Agents, then select the agent and access the Application Pattern logs tab.
- Patterns executed on the agent show true in the Executed On Agent column.
- Certain operations are unsupported with application patterns, including WMI method invocation, change/unchange user, custom operations, SNMP query, and Put file.
Configuration Properties
To optimize application pattern usage, configure these key system properties:
- snagent.applclassificationbehavior: Set to full to enable application patterns and access pattern commands in the allow-list.
- snagent.triggerpatternsonendpoints: Set to true to enable pattern triggering on endpoint CIs, otherwise endpoints use simple classification.
Configure MID Server timeout properties to control agent command execution durations:
- mid.discovery.agent.command.mid.timeout: Maximum wait time for agent response (default 60 seconds).
- mid.discovery.agent.command.timeout: Maximum execution time for commands on the agent host (default 60 seconds).
Debugging Application Patterns
- Enable debugging by setting snagent.applclassificationbehavior to full and using the debug option in the Pattern Designer with ACC connection.
- Check MID Server logs by setting mid.log.level to DEBUG for detailed pattern execution information.
- Review ACC logs for PatternOnTheFlyCheck entries to trace pattern checks.
Oracle Global License Advisory Services (GLAS) Data Collection
- Oracle Java process discovery supports both pattern-based and file-based discovery via ACC.
- When both methods run on the same Java installation, pattern-collected data takes precedence.
- Required plugins include Oracle GLAS store app (version 1.8.4+), ACC Framework, and optionally ACC for Visibility Content.
- Applicable mainly in server environments with partial support for Windows Desktop; specific guidance is available for Windows Desktop updates.
- Application patterns support Oracle GLAS data collection on Linux environments.
- Put file operations for Oracle GLAS are handled through ACC plugins rather than SSH or WMI.
Application patterns gather details on the applications that run on the Agent Client Collector (ACC) host. Application patterns are supported only for servers, and are triggered after the Agent Client Collector host Discovery is complete.
Prerequisites for using application patterns
To enable application patterns on the Agent Client Collector, install the following:
- Agent Client Collector Framework
- Agent Client Collector for Visibility Content
- Discovery
Ensure that the agent is connected to a MID Server to enable pattern execution. Pattern execution on an agent is supported only using a MID Server. Each pattern step is executed on the agent as an ad-hoc check; ad-hoc checks are logged on the agent side as PatternOnTheFlyCheck.
Set the sn_agent.appl_classification_behavior property to full, and restart any MID Servers connected to the agent.
When working in a Windows environment, ensure that you're working with Powershell 3.0 or higher.
- In a Linux or macOS environment: ServiceNow user with sudoers; nopasswd enabled with regular Discovery commands.
- In a Windows environment: Local System user, SYSTEM, or a local user account where the local user account uses one of the following:
- Logon as a service
- Backup (SeBackupPrivilege)
- Debug Programs privileges
Viewing supported application patterns
To view the list of patterns supported for Agent Client Collector, navigate to . Application patterns are the only pattern types supported for use with Agent Client Collector.
Viewing Application Patterns executed on Agent Client Collector
- Navigate to .
- Select an agent.
- Select from the context menu (hamburger icon).
- Open the agent.
- Select the Application Pattern logs tab on the bottom of the page.
The list of patterns executed on the agent appears. Executed patterns are indicated with the value true in the Executed On Agent column.
Unsupported application pattern operations
Application patterns aren't supported in the following pattern operations:
- WMI method invocation
- Change/unchange user
- All custom operations
- SNMP query
- Put file
Agent Client Collector pattern execution properties
| Property | Description |
|---|---|
| sn_agent.appl_classification_behavior | Set value to full to enable working with applications patterns and to access pattern commands in the allow-list. Default: simple Note: To enable application pattern execution with the allow-list, use the allow-list template for application patterns. For details, see Generate a Pattern allowlist. |
| sn_agent.trigger_patterns_on_endpoints | Controls whether Discovery patterns are triggered during application classification for endpoint CIs (cmdb_ci_computer). Set to true to enable pattern triggering on endpoints, which follows the same classification path as
non-endpoint CI types. When set to false, endpoints skip pattern-based classification and fall back to simple classification behavior. Default: false |
| mid.discovery.agent.command.mid.timeout | The maximum duration, in seconds, that the MID Server waits for a response from the agent before timing out. Default: 60 seconds |
| mid.discovery.agent.command.timeout | The maximum amount of time, in seconds, that the command is given to execute on the agent host. Default: 60 seconds |
Using pattern designer debugging in ACC mode
You can debug application patterns that are configured in ACC mode.
- Set the sn_agent.appl_classification_behavior property to full.
- In the Pattern Designer, enable the debug option and select Use ACC connection in the Debug identification section.
The pattern log indicates whether the pattern was successfully executed on the agent.
You can also receive pattern details in the following logs:
- MID Server logs: Set mid.log.level to DEBUG for the mid agent log to display details on the pattern step, ACC check, and the pattern response.
- ACC logs: Search for the string PatternOnTheFlyCheck for details on pattern checks.
Oracle Global License Advisory Services (GLAS) data collection
Oracle Java process discovery works either with patterns (when using either a MID Server or Agent Client Collector), or with file-based discovery (using Agent Client Collector with file-based discovery). If both the pattern and file-based discovery run the same Java installation, the pattern-collected data takes precedence.
- All users must have the Oracle GLAS store app, starting with version 1.8.4.
- Agent Client Collector users:
- Must have the Agent Client Collector Framework store plugin.
- Can have the Agent Client Collector for Visibility Content store plugin, for extra data.
For information about privileged user access, see KB1705845.
Note:Oracle Java discovery with ACC is applicable in all server environments. However, currently, it's partially supported for different Desktop environments. For a Windows Desktop update set, see the KB article KB1705845.
For information on java installation Discovery using Agent Client Collector for Visibility Content, see Discover java installation data using Agent Client Collector for Visibility Content file-based discovery.
For information on the collected data, see Data collected during Agent Client Collector for Visibility Content file-based Discovery.
Application patterns support Oracle GLAS data collection in a Linux environment. For details on using patterns, see Oracle GLAS data collection using patterns.
Although Oracle GLAS supports Put file operations, the related files are deployed using Agent Client Collector plugins instead of SSH or WMI.