How to use Asset Discovery

[sharath sunkari]

I have installed Asset Discovery on my machine and made some configurations in it. Actually here I'm not getting what credentials to give in credentials tab. I need to scan the laptops connected to my office ip . can someone guide me on this . Thanks in advance

[Volodymyr Batrukh]

@sharath sunkari now you need to configure export from your Discovery tool to send all the data to JSM Assets:
1) Generate new token from your newly created import

2) Use this toke for Jira Service Management (Cloud) export type in discovery. you can find more details here - https://confluence.atlassian.com/assetapps/export-1168847949.html



3) Run Discovery scan. Newly generated scan results should be transferred to Jira

If you need more detailed support please contact official Atlassian support

Regards,
Volodymyr B

[sharath sunkari]

Thanks for the help. My laptop info tracked and inserted the data into objects.After inserting the data  let say I added one more drive as "E". will this change add directly into the asset 

[Volodymyr Batrukh]

Hi @sharath sunkari 

if Windows_StorageDevice.pat is enabled for your scans on the next scan the new E drive should be detected and displayed in Jira.
To do the scans automatically from your machine, please install Discovery as a service (via Service tab or run Discovery.exe -i). In that way all the scan will be done automatically within configured period.

Regards,
Volodymyr B.

[sharath sunkari]

Windows_StorageDevice.pat is enabled for my scan and I have installed discovery as a service and i can find the latest scans in the /discovery_tools/scans folder. But here my concern is how the updated data will be inserted to the Jira automatically without any configuration. can you plz let me know im new to this entire concept i tried maximum from my side to learn this stuff. Apologies it might be irritating to you but i just wanted to learn 

[Volodymyr Batrukh]

@sharath sunkari if you have configured export type as described above (with using token) each time Discovery tool is doing scans data is automatically exported to Jira (and scan results are removed from your machine) and all the previous objects in Assets are updated.

[Mariano]

Hello @Volodymyr Batrukh ! Why am I not seeing the service tab on Discovery 7.1.0?

[Volodymyr Batrukh]

Hi @Mariano Edvardsson 

Assets Discovery running on Linux (via Mono) do not have Service and Update tab as services are working just on Windows devices.

To have service functionality on Linux you need to create a service via systemd.

Regards,
Volodymyr B.

[Mariano]

fantastic @Volodymyr Batrukh

thank you so much for your help! Do you happen to know what could be going on the other thread I posted ?

https://community.atlassian.com/t5/Jira-Service-Management/Assets-Discovery-7-1-0-fails-to-scan-network/qaq-p/2926821 

you will be my hero if you help me figure that out !!! Thanks in advance. 

[Volodymyr Batrukh]

@sharath sunkari it seems you did some misconfiguration. Empty credentials should reference to your local laptop scan settings (you can change IP range to 127.0.0.1). And filled credentials should reference to "laptop office" scan settings

[Volodymyr Batrukh]

logs cannot reach devices by provided credentials

[sharath sunkari]

I configured export type as file copy

[Volodymyr Batrukh]

Hi @sharath sunkari 

To scan network devices from your network you'll need:

1. Configure IPs range in scan settings  - https://confluence.atlassian.com/display/ASSETAPPS/Scan+settings
2. Configure credentials for scanning (windows - WMI, linux-based - ssh) https://confluence.atlassian.com/display/ASSETAPPS/Credentials
3. Configure export to Jira DC or Jira Cloud (https://confluence.atlassian.com/display/ASSETAPPS/Export)
4. Run Discovery.exe to start scan and automatically export data to Jira
   
   

Regards,
Volodymyr B.

[sharath sunkari]

Hi @Volodymyr Batrukh 

I have gone through the documentation and set up all the configurations.
What actually pattern mean..?
I gave localhost in scan Ip range, does it mean it will scan all the devices connected to that same ip..?
what credentials need to give in credentails tab 

[Volodymyr Batrukh]

@sharath sunkari , pattern describe the part of the information that will be collected from the corresponding device. Some of the patterns are required for device type. 

In your configured example two hosts from scan setting 0001 will be tried to scan by configured credentials.
In your example you have created empty Windows credentials that will allow to scan just your local machine 127.0.0.1. Scan for other device will fails - as credentials doesn't much.

Simply saying to scan another Windows machine in your network you will need to:
1) Add separate scan setting for the device/set of devices
2) Add Windows credentials for local administrator on scanned device(s). Select configured scan settings from step 1 (instead of All)
3) The scanned device should be allowed to be scanned over WMI (configured WMI rules, and Admin user should be able to run WMI) - https://serverfault.com/questions/28520/which-permissions-rights-does-a-user-need-to-have-wmi-access-on-remote-machines

- Volodymyr B.

[sharath sunkari]

I got your point . let say i have 25 devices (laptops ) conneted to my ip. 25 users will use this 25 laptops. Do i need to set up 25 scans by giving each administrator credentials as each user having their own credentials

[Volodymyr Batrukh]

Ideally you will need to configure separate admin user (or user with remote WMI access) on each laptop and use this user for scanning devices via your Discovery instance and configure one scan setting including all the devices.
If that is not possible, you'll need to add credentials for each device separately. scan setting still can contain all the devices, but it will increase scan time as we will try to reach each device by all the credentials...

[sharath sunkari]

I made the below configurations 

I have exited and opened the command prompt and executed discovery.exe
and no zip file is downloaded or generated

[Volodymyr Batrukh]

By default (if you did not configure any export type) all scan results should be created in <Discovery root folder>/scans folder. Are you seeing any errors in <Discovery root folder>/logs ?

BTW for you local machine you can use 127.0.0.1 and empty windows credentials.

[sharath sunkari]

I made changes

I created a Test Schema using the IT template 
I created a import naming SS
But im unable to find enable option
im able to edit mapping but source fields are not visible

[sharath sunkari]

Could you please help me in solving this literally im trying from last two days to resolve this

[Volodymyr Batrukh]

Sorry, I am a bit confused. As Discovery scan and Assets configuration are two different topics...

Were you able to get scan results from your local network/local machine?

If so you can use scan .zip file to create import Assets configuration. While creating new import configuration please just select newly created scan result zip. The schema should be created automatically:



after that you should generate new token from the configuration and use it for the JSM Cloud export in Discovery. So all scans from the discovery will be transferred to JSM

[sharath sunkari]

Now i have enabled cereate object types and attributes automatically


Now i have clicked the import button


Data imported with some errors

Next what to do from here 
can you guide me step by step from here. I am clear upto this point

[sharath sunkari]

I am trying to fetch the data of device connected to an IP.I am attaching the Screenshots for your reference. I configured credentials for Bhanu Teja and clicked on Test Button by giving the ip mentioned in the previous screen(i.e, scan setting id 00002) i am getting an error connection port 5985 is not reachable. 

[Volodymyr Batrukh]

Hi @sharath sunkari 

it seems that WinRm is blocked ob the machine you are trying to access. You need properly configure the permissions for the user access the machine (see more details here) and enable WMI firewall rules. I.e. via power shell:

Enable-NetFirewallRule -DisplayName ""Windows Management Instrumentation (ASync-In)""
Enable-NetFirewallRule -DisplayName ""Windows Management Instrumentation (DCOM-In)""
Enable-NetFirewallRule -DisplayName ""Windows Management Instrumentation (WMI-In)""
Enable-NetFirewallRule -DisplayName ""Virtual Machine Monitoring (Echo Request - ICMPv4-In)""

[sharath sunkari]

IM unable to do the process for WMI cofigurations which you shared as a link. 
Today I tried to get the data of my personal laptop at home. I have set IP of my personal laptop(152.58.197.94) in the scan settings as my personal laptop is connected to that IP. I gave the credentials of my personal lappy and tried to click on the test button by giving the mentioned IP(152.58.197.94) but its showing as IP not reachable though i installed and executed the Discovery_Agent.exe -(my token) in my personal laptop. Can you please guide me. if possible can we have a call for better understanding of me.
Thanks. 

[sharath sunkari]

IM unable to do the process for WMI cofigurations which you shared as a link. 
Today I tried to get the data of my personal laptop at home. I have set IP of my personal laptop(152.58.197.94) in the scan settings as my personal laptop is connected to that IP. I gave the credentials of my personal lappy and tried to click on the test button by giving the mentioned IP(152.58.197.94) but its showing as IP not reachable though i installed and executed the Discovery_Agent.exe -(my token) in my personal laptop. Can you please guide me. if possible can we have a call for better understanding of me.
Thanks.