Discovery Administration
Configuring and managing the discovery system.
Discovery Configuration
Global Settings
- Discovery intervals
- Retry policies
- Timeout settings
- Concurrent scan limits
Credentials Management
Windows:
- Domain: CORP
Username: discovery_user
Password: encrypted_password
Linux:
- Type: SSH
Username: root
Key: /path/to/key
SNMP:
- Version: v3
Username: snmp_user
AuthProtocol: SHA
PrivProtocol: AES
Discovery Ranges
IP Range Configuration
ranges:
- name: "Corporate Network"
range: "192.168.1.0/24"
enabled: true
schedule: "0 */4 * * *"
- name: "DMZ"
range: "10.0.0.0/24"
enabled: true
schedule: "0 2 * * *"
Exclusions
- Specific IPs
- IP ranges
- Device types
- Critical systems
Discovery Agents
Agent Deployment
# Windows
msiexec /i NopeSightAgent.msi /qn TOKEN=your-token
# Linux
curl -sSL https://install.nopesight.com | bash -s -- --token your-token
# Docker
docker run -d \
--name nopesight-agent \
-e TOKEN=your-token \
nopesight/agent:latest
Agent Management
- View active agents
- Monitor agent health
- Update agent configuration
- Remove inactive agents
Discovery Methods
Network Scanning
- ICMP ping sweep
- Port scanning
- Service detection
- OS fingerprinting
WMI Discovery (Windows)
- System information
- Installed software
- Running services
- Network configuration
SSH Discovery (Linux)
- System details
- Package inventory
- Service status
- Network connections
SNMP Discovery
- Device information
- Interface details
- System metrics
- MIB walking
Scheduling
Cron-based Scheduling
schedules:
full_scan:
expression: "0 2 * * 0" # Weekly Sunday 2 AM
type: "full"
incremental:
expression: "0 */6 * * *" # Every 6 hours
type: "incremental"
real_time:
expression: "*/15 * * * *" # Every 15 minutes
type: "changes_only"
On-Demand Discovery
- Manual trigger
- Event-based
- API-initiated
- Change detection
Performance Tuning
Optimization Settings
performance:
max_concurrent_scans: 50
scan_timeout: 300
retry_attempts: 3
batch_size: 100
queue_workers: 4
Resource Management
- CPU limits
- Memory allocation
- Network bandwidth
- Database connections
Monitoring
Discovery Metrics
- Scan success rate
- Discovery time
- New CIs found
- Failed attempts
Health Checks
- Agent connectivity
- Credential validity
- Network accessibility
- Service availability
Troubleshooting
Common Issues
- Authentication failures
- Network timeouts
- Agent disconnections
- Incomplete scans
Debug Mode
# Enable debug logging
export DEBUG=nopesight:discovery:*
# Verbose agent mode
python agent.py --verbose --debug
# Test specific device
nopesight-discover --test --host 192.168.1.100
Security
Access Control
- Discovery credentials vault
- Encrypted storage
- Audit logging
- Least privilege
Network Security
- Firewall rules
- Allowed ports
- Encryption
- VPN support