Discovery Administration
Configuring and managing the discovery system.
Discovery Configuration
Global Settings
- Discovery intervals
- Retry policies
- Timeout settings
- Concurrent scan limits
Credentials Management
Configure secure credentials for discovery operations:
Windows Systems:
- Domain credentials for enterprise environments
- Local administrator accounts for workgroups
- Password encryption for secure storage
Linux Systems:
- SSH key-based authentication (recommended)
- Username/password authentication
- Sudo or root access for complete inventory
SNMP Devices:
- SNMPv3 with authentication (recommended)
- Configure authentication and privacy protocols
- Community strings for SNMPv2c (legacy)
Discovery Ranges
IP Range Configuration
Define network ranges for discovery:
Corporate Network:
- Network range: 192.168.1.0/24
- Status: Enabled
- Schedule: Every 4 hours
DMZ:
- Network range: 10.0.0.0/24
- Status: Enabled
- Schedule: Daily at 2 AM
Exclusions
- Specific IPs
- IP ranges
- Device types
- Critical systems
Discovery Agents
Agent Deployment
# Windows
msiexec /i Tripl-iAgent.msi /qn TOKEN=your-token
# Linux
curl -sSL https://install.nopesight.com | bash -s -- --token your-token
# Docker
docker run -d \
--name nopesight-agent \
-e TOKEN=your-token \
nopesight/agent:latest
Agent Management
- View active agents
- Monitor agent health
- Update agent configuration
- Remove inactive agents
Discovery Methods
Network Scanning
- ICMP ping sweep
- Port scanning
- Service detection
- OS fingerprinting
WMI Discovery (Windows)
- System information
- Installed software
- Running services
- Network configuration
SSH Discovery (Linux)
- System details
- Package inventory
- Service status
- Network connections
SNMP Discovery
- Device information
- Interface details
- System metrics
- MIB walking
Scheduling
Cron-based Scheduling
schedules:
full_scan:
expression: "0 2 * * 0" # Weekly Sunday 2 AM
type: "full"
incremental:
expression: "0 */6 * * *" # Every 6 hours
type: "incremental"
real_time:
expression: "*/15 * * * *" # Every 15 minutes
type: "changes_only"
On-Demand Discovery
- Manual trigger
- Event-based
- API-initiated
- Change detection
Performance Tuning
Optimization Settings
performance:
max_concurrent_scans: 50
scan_timeout: 300
retry_attempts: 3
batch_size: 100
queue_workers: 4
Resource Management
- CPU limits
- Memory allocation
- Network bandwidth
- Database connections
Monitoring
Discovery Metrics
- Scan success rate
- Discovery time
- New CIs found
- Failed attempts
Health Checks
- Agent connectivity
- Credential validity
- Network accessibility
- Service availability
Troubleshooting
Common Issues
- Authentication failures
- Network timeouts
- Agent disconnections
- Incomplete scans
Debug Mode
# Enable debug logging
The Tripl-i Discovery Agent provides built-in debugging capabilities:
- Enable verbose logging for detailed troubleshooting
- Test connectivity to specific devices before full scans
- Monitor discovery operations in real-time
Security
Access Control
- Discovery credentials vault
- Encrypted storage
- Audit logging
- Least privilege
Network Security
- Firewall rules
- Allowed ports
- Encryption
- VPN support