---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Horizontal discovery process flow with patterns

# Horizontal discovery process flow with patterns {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Horizontal discovery process flow with patterns

Horizontal discovery with patterns in ServiceNow follows a four-phase process similar to horizontal discovery with probes, but the last two phases leverage patterns instead of additional probes.
This process enables efficient discovery and CMDB updates by combining probe-based scanning and classification with pattern-driven identification and exploration.
Show full answer Show less  

## Key Features

* **Scanning Phase:** Uses the Shazzam probe and port probes placed in the External Communication Channel (ECC) queue. The MID Server executes these probes to detect open ports on a host, identifying machine types based on port responses (e.g., port 22 indicates a UNIX/Linux machine).
* **Classification Phase:** Based on port probe results, Discovery sends a classification probe via the ECC queue. This probe gathers detailed information like the operating system version to classify the Configuration Item (CI) accurately. Only one classification probe runs per device.
* **Identification and Exploration Phases:** These phases are unified through patterns. Discovery selects a classifier based on the CI class and criteria in CI classifier records, which directs a Horizontal Pattern probe to launch the appropriate pattern. The pattern contains sensors that update the CMDB with identification and exploration data.
* **Credential Requirements:** Patterns require both applicative credentials (to detect applications on hosts) and host access credentials. Proper configuration of these credentials is essential for successful discovery.
* **Usage of Probes and Sensors:** Only the Horizontal Discovery Sensor is used during the pattern-driven phases. Other probes and sensors are not utilized.

## Key Outcomes

* This process allows for accurate and automated discovery of hosts and applications, reducing manual intervention.
* It improves CMDB data quality by ensuring that identification and exploration are driven by well-defined patterns tailored to CI types.
* By leveraging MID Server and ECC queues, discovery operations are scalable and efficient across environments.
* Ensuring correct credential configuration enables comprehensive application discovery on hosts.  
Horizontal discovery with patterns has four phases, just as horizontal discovery with
probes does. However, for the last two phases, Discovery triggers operations from a pattern,
rather than additional sets of probes.

## Scanning phase

1. Discovery first takes the Shazzam probe (and then [port probes](https://www.servicenow.com/docs/mTJydb5_g1_KYh6wCnBhwA "Port probes are used in Discovery by the Shazzam probe to detect protocol activity on open ports on devices it encounters.")) and places it in a request in the External Communication Channel (ECC) queue.
2. The MID Server checks the ECC queue, retrieves the discovery request, and runs the probes against the host and discovers open ports.
3. The port probes scan common ports using several protocols, such as WMI, HTTP, SSH, and SNMP.
4. If one or more ports respond, the Shazzam probe sends information about the port back to the ECC queue through the MID Server.
5. Discovery checks the ECC queue to find out which ports responded, which identifies the type of machine. For example, if Shazzam detects that the machine is listening on port 22, Discovery treats the machine as a UNIX or Linux machine.
{#disco-process-flow-patterns__ol_m13_l45_bz}

## Classification phase

1. The Discovery application determines which classification probe to send to the newly discovered device by using information in the record of the port probe that successfully responded.
2. Discovery puts the classification probe into the ECC queue.
3. The MID Server checks the ECC queue, retrieves the discovery request, and runs the classification probe.
4. The classification probe retrieves additional information, such as which version of the operating system is running on a machine. This information determines the class of the CI that Discovery found. There is only one classification probe per discovered device.
5. The classification probe sends information back to the instance ECC queue through the MID Server.
{#disco-process-flow-patterns__ol_ey2_pqt_lx}

## The Identification and Exploration phases

Patterns unify the Identification and Exploration phases of discovery.

1. Discovery determines which classifier to use based on the class of the CI and the criteria specified in all CI classifier records. The classifier specifies the [Horizontal Pattern
   probe](https://www.servicenow.com/docs/GYDT1RBkCA0uG6cipcw9Iw "Discovery uses the Horizontal Pattern probe to launch patterns for horizontal discovery."), which in turn specifies which pattern to launch. The Horizontal pattern probe also contains a sensor which does the actual work of updating the CMDB.  
   Note:  
   Patterns need applicative credentials to find applications running on host machines. Make sure you have applicative credentials configured along with the credentials required to access the host machine itself.
2. The operations in the pattern specify the actions that Discovery needs to take for both the identification and exploration phases. Discovery knows which [identification rules](https://www.servicenow.com/docs/access?context=c_IdentificationRules&version=brazil&pubname=brazil-servicenow-platform&ft:locale=en-US) to use based on the CI type in the pattern, and Discovery makes inserts or updates to the CMDB based on these rules. Only the Horizontal Discovery Sensor is used. Other probes and sensors are not used.
{#disco-process-flow-patterns__ol_ycl_nq5_bz}
**Related concepts**   

* [Horizontal discovery process flow with probes and sensors](https://www.servicenow.com/docs/Xn_MIDuSkVzKiv3X_zWYDw "The horizontal discovery process passes through the four phases of discovery using probes, which gather information on the target machine. Sensors then help Discovery determine what to do with that information.")

