This documentation supports the 20.02 (12.0) version of BMC Discovery.To view an earlier version of the product, select the version from the Product version menu.

Executing patterns manually

Patterns are generally triggered by specific events or changes that occur during a discovery run. Sometimes you might want to run a pattern outside a discovery run (for example, you might be developing patterns against already scanned hosts). To do so, you can run a pattern against the nodes contained in a group.

Related topics

Managing-manual-groups

Knowledge-management

KeywordsManual pattern execution

Running a pattern manually is not the same as triggering it as a result of scanning. Discovery calls can be made from the pattern, but it does not undertake full discovery. If you have changed your discovery credentials or configuration, rescan before running patterns manually.

To select hosts or other nodes

You can select hosts or other nodes by adding them to a group.

From a view node (including host) page, select Groups from the Actions list and add the node to a group. Or, from a report or other search result, select the required items and then select Groups from the Actions list and add the nodes to a group.

Node types against which patterns can be run

Add nodes to your group of the kind that the pattern triggers on (for example, if the pattern triggers on a DiscoveredProcess, add DiscoveredProcess nodes). However, the system can expand host nodes in an intelligent fashion such that it is possible, for example, to simply add a host even though the pattern requires a DiscoveredProcess.

The following table lists the complete set of traversals used to expand from host nodes to other node kinds. Where more than one traversal is shown, the traversal steps are followed one after the other.

Required

Traversal(s)

Discovered Process

  • InferredElement:Inference:
       Primary:DeviceInfo
  • DiscoveryResult:DiscoveryAccessResult:
       DiscoveryAccess:DiscoveryAccess
  • DiscoveryAccess:DiscoveryAccessResult:
       DiscoveryResult:ProcessList
  • List:List:Member:DiscoveredProcess

Discovered Listening Port

  • InferredElement:Inference:
        Primary:DeviceInfo
  • DiscoveryResult:DiscoveryAccessResult:
        DiscoveryAccess:DiscoveryAccess
  • DiscoveryAccess:DiscoveryAccessResult:
        DiscoveryResult:NetworkConnectionList
  • List:List:
       Member:DiscoveredListeningPort

Software Instance

  • Host:HostedSoftware:
       RunningSoftware:SoftwareInstance

Business Application Instance

  • Host:HostedSoftware:
       RunningSoftware:BusinessApplicationInstance

Device Info

  • InferredElement:Inference:
       Primary:DeviceInfo

Host Info

  • InferredElement:Inference:
       Primary:HostInfo

Cluster

  • ContainedHost:HostContainment:
       HostContainer:Cluster

Host Container

  • ContainedHost:HostContainment:
       HostContainer:HostContainer

To run a pattern

  1. From the main menu, select Manage > Knowledge.
    The Knowledge Management page opens.
  2. Select the pattern module containing the pattern that you want to run.
    From this page, you can edit the pattern source or configuration, if necessary. Editing the pattern is described in Viewing-and-editing-a-pattern-module.
    After the pattern is edited, the Knowledge Management page opens, showing a Save Pattern Module Edit - Complete panel.
  3. From the Pattern Module list, select the pattern module that you want to run.
    The Pattern Module page opens.
  4. In the heading table, click the Pattern link.
  5. From the Actions list, select Run Pattern.
  6. From the Run against Group list, select the group that you want to run the pattern against, and then choose the settings for the pattern run. Set Expand, Execution Logging, and Additional Discovery.

The following table describes the settings.

While the pattern is running, the results page is displayed.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*