• 0 Vote(s) - 0 Average
  • 5
  • 4
  • 3
  • 2
  • 1
Thread Modes

Import Software from Discovery
#1
Hi,

I have populated Software Catalog with Discovery and there are some entries.
I have created a Detection rule on one of the Software items and as per documentation I should now run a Scheduled Alert called "Import Software from Discovery". It finishes one second after it was run, but nothing happens.

Could someone please shed some light on to this Alert:
- what should it actually do
- should the Software Catalog be emptied and repopulated again with new detection rules applied (i hope it doesn't show a software marked inside detection rule, but only one software which should include all those items defined in Detection rule - at least this is what i am aiming for and understand this functionality).

After some investigation i have found out that on the installation i need this, the SQL statement in Alert definition is empty, while in the demo VM from EZV it has an execute import_discovery statment. I have tried with this one, too, but the results is same - nothing.

Thanks for any useful information on this matter.

(12-05-2018, 08:29 AM)cebokli Wrote: Hi,

I have populated Software Catalog with Discovery and there are some entries.
I have created a Detection rule on one of the Software items and as per documentation I should now run a Scheduled Alert called "Import Software from Discovery". It finishes one second after it was run, but nothing happens.

Could someone please shed some light on to this Alert:
- what should it actually do
- should the Software Catalog be emptied and repopulated again with new detection rules applied (i hope it doesn't show a software marked inside detection rule, but only one software which should include all those items defined in Detection rule - at least this is what i am aiming for and understand this functionality).

After some investigation i have found out that on the installation i need this, the SQL statement in Alert definition is empty, while in the demo VM from EZV it has an execute import_discovery statment. I have tried with this one, too, but the results is same - nothing.

Thanks for any useful information on this matter.

So, I have found the stored procedure and from what i can tell it doesn't actually find any records.
This is the statement it does at the beginning:
DELETE FROM AM_SOFTWARE WHERE AUTOMATIC_INSERT = 1 AND ASSET_ID IN (SELECT ASSET_ID FROM AM_ASSET WHERE UPDATED_BY_DISCOVERY = 1)

I have only one record in am_software and even that one is not marked as automatic_insert = 1.
So i amclearly missing something. Is there something we need to do in the discovery import step at the first place, so that the software is marked for insertion? I don't really get it Sad

------- EDIT

Looking further through the stored procedure, also the SELECT statement, which seems to identifiy all the installed software etc, to process, doesn't find anything. I have a suspiction here Smile

Does the Equipment discovered by the Discovery need to be "moved" - activated  to Assets so that licences and everything is workng correclty? Specifically this stored procedure and detection rules?


Thanks
cebokli, proud to be a member of EV CONNECT FORUM since Oct 2016.






Users browsing this thread: 1 Guest(s)