This documentation relates to the latest released version of BMC Discovery.
See the information on this topic for versions 11.2 or 11.1.

Each time an endpoint is discovered, a Discovery Access node is created. It has relationships to the retrieved discovery information. Discovery Access nodes are created even if discovery fails, so that failed access is clearly identified in the model.

The endpoint attribute of a Discovery Access node describes the target used for discovery. The target for discovery is currently an IP v4 or IP v6 address.

Discovery Access Lifecycle

The following section describes the scenarios in which a Discovery Access is created or destroyed. DDD nodes are never updated.

Creation

A Discovery Access node is created when BMC Discovery scans an IP address and that IP address is not considered to be dark space. This is either:

  • when there has never been a response on the IP address, or
  • when there has been no response for long enough for a previously discovered device to age out, it is then considered to be dark space.

Removal

Aging parameters exist for Directly Discovered Data Nodes which have a particular cut-off time. The Aging process will remove any Discovery Access Nodes and all of the other DDD Nodes associated with that node if this default time period is exceeded.

However, if the Discovery Access Node is the only one for an endpoint, then it is not removed, unless it is considered dark space. This enables BMC Discovery to keep a permanent record of every endpoint that has ever been scanned. These Discovery Access Nodes are the only ones which can exceed the default cut-off Aging process. 

The cut-off time is configurable, see DDD removal for more information.

Discovery Access node attributes

The attributes of a Discovery Access node are as described in the following table:

UI Name
Attribute Name and Type

Description

Range Prefix
range_prefix string

Distinguish overlapping address spaces.

Endpoint
endpoint string

Accessed IP address.

Not displayed in UI
__index int

Index of endpoint for owning range.

Not displayed in UI
reasoning_uuid string

Reasoning machine that performed discovery.

Not displayed in UI
engine_id int

ECA engine on Reasoning machine the performed discovery.

State
state string

State of access — completed, in progress, and so forth.

Start Time
starttime date

Date and time access started.

End Time
endtime date

Date and time access ended.

Discovery Start Time
discovery_starttime date

Date and time access started on a scanning appliance.

Discovery End Time
discovery_endtime date

Date and time access ended on a scanning appliance.

Result
result string

Result of access.

End State
end_state string

Final state of access.

Reason
reason string

Reason for failure, if any.

On Hold Since
is_being_held date

True if access is on hold waiting for a scan window.

On Hold Duration
on_hold_duration int

How long the access was held waiting for a scan window.

Not shown in UI
_first_marker boolean

True if this is the first DiscoveryAccess for an endpoint.

Not shown in UI
_last_marker boolean

True if this is the last DiscoveryAccess for an endpoint.

Dark Space
dark_space boolean

True if when this was the last DiscoveryAccess for an endpoint it was to be treated as dark space.

Not shown in UI
_last_interesting boolean

True if this is the last DiscoveryAccess which accessed an endpoint.

Session Establishment Duration
discovery_duration int

The amount of time taken to establish a session with the endpoint (in seconds).

Total Discovery Duration
discovery_duration_sum int

Total time in seconds spend in discovery including session establishment time.

Not shown in UI
access_failure boolean

True if there are session failures linked to this DiscoveryAccess.

Not shown in UI
access_success string

The session type and credential used.

Not shown in UI
_consolidation_done list:string

List of the consolidation appliance identifiers this DA has been be sent to.

Retrieved by scanning appliance
is_consolidation boolean

True if present, always have the value True and indicates that the data for this DiscoveryAccess originated from a scanning appliance before being consolidated on this one.

No Response Count
no_response_count int

The number of no response DAs suppressed onto a single no response DA.

Last Response Time
last_response date

The date of the last response DA.

Discovered From Scanner File
is_scanner_file boolean

True if this data came from a scanner file.

Best IP Score
best_ip_score int

Best IP score used by endpoint optimisation.

Scanned Indirectly
scanned_indirectly string

Method used to indirectly scan endpoint.

Discovery Access node relationships

The relationships of a Discovery Access node are as described in the following table:

Destination

Relationship

Description

Host

DiscoveryAccess:
Associate:
Inference:
InferredElement:
Host

Host inferred from this access.

Management Controller

DiscoveryAccess:
Associate:
Inference:
InferredElement:
ManagementController

Management Controller inferred from this access.

MFParts

DiscoveryAccess:
Associate:
Inference:
InferredElement:
MFPart

MFPart inferred from this access.

Network Device

DiscoveryAccess:
Associate:
Inference:
InferredElement:
NetworkDevice

NetworkDevice inferred from this access.

Printer

DiscoveryAccess:
Associate:
Inference:
InferredElement:
Printer

Printer inferred from this access.

SNMP Managed Device

DiscoveryAccess:
Associate:
Inference:
InferredElement:
SNMPManagedDevice

SNMP Managed Device inferred from this access.

Storage Device

DiscoveryAccess:
Associate:
Inference:
InferredElement:
StorageDevice

Storage Device inferred from this access.

Failed Host

DiscoveryAccess:
DiscoveryAccess:
AccessFailure:
InferredElement:
Host

Probable Host corresponding to a failed access.

Failed Management Controller

DiscoveryAccess:
DiscoveryAccess:
AccessFailure:
InferredElement:
ManagementController

Probable Management Controller corresponding to a failed access.

Failed MF Part

DiscoveryAccess:
DiscoveryAccess:
AccessFailure:
InferredElement:
MFPart

Probable MFPart corresponding to a failed access.

Failed Network Device

DiscoveryAccess:
DiscoveryAccess:
AccessFailure:
InferredElement:
NetworkDevice

Probable NetworkDevice corresponding to a failed access.

Failed Printer

DiscoveryAccess:
DiscoveryAccess:
AccessFailure:
InferredElement:
Printer

Probable Printer corresponding to a failed access.

Failed SNMP Managed Device

DiscoveryAccess:
DiscoveryAccess:
AccessFailure:
InferredElement:
SNMPManagedDevice

Probable SNMP Managed Device corresponding to a failed access.

Failed Storage Device

DiscoveryAccess:
DiscoveryAccess:
AccessFailure:
InferredElement:
StorageDevice

Probable Storage Device corresponding to a failed access.

Optimized Host

DiscoveryAccess:
DiscoveryAccess:
AccessOptimization:
InferredElement:
Host

Host corresponding to an access that was optimized away.

Optimized Management Controller

DiscoveryAccess:
DiscoveryAccess:
AccessOptimization:
InferredElement:
ManagementController

Management Controller corresponding to an access that was optimized away.

Optimized MFPart

DiscoveryAccess:
DiscoveryAccess:
AccessOptimization:
InferredElement:
MFPart

MFPart corresponding to an access that was optimized away.

Optimized Network Device

DiscoveryAccess:
DiscoveryAccess:
AccessOptimization:
InferredElement:
NetworkDevice

NetworkDevice corresponding to an access that was optimized away.

Optimized Printer

DiscoveryAccess:
DiscoveryAccess:
AccessOptimization:
InferredElement:
Printer

Printer corresponding to an access that was optimized away.

Optimized SNMP Managed Device

DiscoveryAccess:
DiscoveryAccess:
AccessOptimization:
InferredElement:
SNMPManagedDevice

SNMP Managed Device corresponding to an access that was optimized away.

Optimized Storage Device

DiscoveryAccess:
DiscoveryAccess:
AccessOptimization:
InferredElement:
StorageDevice

Storage Device corresponding to an access that was optimized away.

Device Info

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DeviceInfo

Device info.

Directories

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DirectoryListing

Directory Listing.

API Call Results

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredAPIResult

API call results.

API Call Result Lists

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredAPIResultList

API call result lists.

Mainframe Application Components

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredApplicationComponentList

Mainframe Application Components.

Network Device Cards

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredCardList

Network Device Cards.

Network Device Chassis

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredChassisList

Network Device Chassis.

Command Results

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredCommandResult

Command results.

Coupling Facilities

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredCouplingFacilityList

Coupling Facilities.

Mainframe Database Properties

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredDatabaseDetailList

Mainframe Database Properties.

Mainframe Databases

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredDatabaseList

Mainframe Databases.

Mainframe Software Dependencies

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredDependencyList

Mainframe Software Dependencies.

Storage Disks

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredDiskDriveList

Storage Disks.

Files

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredFile

Files.

IP Addresses

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredIPAddressList

IP Addresses.

MAC Addresses

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredMACAddresses

MAC Addresses.

Mainframes

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredMainframeList

Mainframes.

Managed Devices

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredManagedDeviceList

Managed Devices.

Mainframe MFParts

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredMFPartList

Mainframe MFParts.

Mainframe MQ Properties

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredMQDetailList

Mainframe MQ Properties.

Interface Details

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredNetworkInterfaceList

Interface Details.

Packages

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredPackages

Packages.

Patches

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredPatches

Patches.

Mainframe Programs

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredProgramList

Mainframe Programs.

Registry Queries

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredRegistryValue

Registry Queries.

SNMP Queries

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredSNMP

SNMP Query.

SNMP Table Queries

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredSNMPTable

SNMP Table Query.

Mainframe Software

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredSoftwareList

Mainframe Software.

Storage Subsystems

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredStorageSubsystemList

Storage Subsystems.

Sysplexes

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredSysplexList

Sysplexes.

Storage Tapes

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredTapeDriveList

Storage Tapes.

Mainframe Transactions

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredTransactionList

Mainframe Transactions.

WBEM Associators

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredWBEMAssociators

WBEM Associators.

WBEM Instances

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredWBEMEnumInstances

WBEM Instances.

WBEM Queries

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredWBEMQuery

WBEM Queries.

WMI Queries

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
DiscoveredWMIQuery

WMI Queries.

File Systems

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
FileSystemList

File systems.

FQDNs

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
FQDNList

FQDNs.

HBAs

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
HBAInfoList

HBAs.

Host Info

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
HostInfo

Host info.

Network Connections

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
NetworkConnectionList

Network Connections.

Processes

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
ProcessList

Processes.

Registry Keys

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
RegistryListing

Registry Keys.

Services

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
ServiceList

Services.

Virtual Machines

DiscoveryAccess:
DiscoveryAccess:
DiscoveryAccessResult:
DiscoveryResult:
VirtualMachineList

Virtual Machines.

Endpoint

DiscoveryAccess:
DiscoveryAccess:
Endpoint:
Endpoint:
Endpoint

Endpoint.

Session Results

DiscoveryAccess:
DiscoveryAccess:
Metadata:
Detail:
SessionResult

Session details.

Errors

DiscoveryAccess:
ElementWithStatus:
Status:
Status:
ECAError

Errors detected by the ECA engine.

Caused Implicit Scans

DiscoveryAccess:
ExplicitEndpoint:
ImplicitScan:
ImplicitEndpoint:
DiscoveryAccess

Implicitly scanned endpoints due to this access.

Reason for Implicit Scan

DiscoveryAccess:
ImplicitEndpoint:
ImplicitScan:
ExplicitEndpoint:
DiscoveryAccess

Access which caused this endpoint to be implicitly scanned.

Provider Accesses

DiscoveryAccess:
List:
List:
Member:
ProviderAccess

Provider Accesses.

Discovery Run

DiscoveryAccess:
Member:
List:
List:
DiscoveryRun

Discovery Run.

Previous Discovery Access

DiscoveryAccess:
Next:
Sequential:
Previous:
DiscoveryAccess

Previous DiscoveryAccess.

Next Discovery Access

DiscoveryAccess:
Previous:
Sequential:
Next:
DiscoveryAccess

Next DiscoveryAccess.

Directories on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DirectoryListing

Directory Listing on another device.

API Call Results on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredAPIResult

API call results on another device.

API Call Result Lists on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredAPIResultList

API call result lists on another device.

Command Results on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredCommandResult

Command results on another device.

Files on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredFile

Files on another device.

Registry Queries on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredRegistryValue

Registry Queries on anoher device.

SNMP Queries on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredSNMP

SNMP Query on another device.

SNMP Table Queries on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredSNMPTable

SNMP Table Query on another device.

WBEM Associators on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredWBEMAssociators

WBEM Associators on another device.

WBEM Instances on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredWBEMEnumInstances

WBEM Instances on another device.

WBEM Queries on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredWBEMQuery

WBEM Queries on another device.

WMI Queries on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
DiscoveredWMIQuery

WMI Queries on another device.

File Systems on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
FileSystemList

File systems.

Registry Keys on Another Device

DiscoveryAccess:
RequestSource:
Request:
DiscoveryResult:
RegistryListing

Registry Keys on another device.

Was this page helpful? Yes No Submitting... Thank you
  • No labels
© Copyright 2004 - 2019 BMC Software, Inc.
Legal notices