Service

To automate the discovery, you can install the Discovery-Tool as a service from the Service tab by opening Discovery in the settings mode (discovery.exe -s). 

Service Restart Interval:

You can configure the interval of the service restart (default 24h).

When the interval is reached, the service will perform a self restart to release the allocated memory that can not release during the service process is running.

It will not affect a running scan, the restart will only executed when there is a free time slot between the configured scan settings.

When it is configured to 0 the function is disabled.

Install/Uninstall Service Button*

Here you can install or uninstall the Discovery-Tool as a Windows Service out of the GUI.

If you are using optional Windows Agents in your Network you must run the Discovery-Tool as Service to collect the Agent Data.

*Only available by using the Discovery Tool on a Windows Environment.

Agent Settings

Configure the below settings if you have Discovery-Agents running in your network from the Agent tab.

Patterns transfer

Here you can configure files that will be synchronized with all available Agents at the configured range.

For example you can transfer pattern files from "discovery/pattern/myCustomPattern.pat" to "agent/pattern/myCustomPattern.pat"

This will also work if you made changes to your "source" files.

You also can synchronize Agent-Configurations (Agents.cfg), just copy a Agent.cfg to your main discovery folder an choose it for synchronizing.

Agent Scan Interval (min)

Here you can define how often the Discovery-Tool will check for available Discovery-Agents with new Data.

Agent IP Range

Here you can define the IP Range(s) that will be checked for available Discovery-Agents.

Like the IP-Range at the Common-Setting you can define multiple Ranges. 

If you are adding IP ranges for the first time, select View configured agents in the Manage Agents section to view the list of your configured agents.

Agent TCP Port:

The TCP Port of the available Agents in the configured IP Range.

Agent Timeout (s):

The timeout for each connection to a remote agent.

default = 3 seconds

Agent Token

Add a secure token in this field or select Generate token and then select Save token. 

Copy this token and navigate to the machine or node where the Agent is installed. Run the agent with -token parameter (Discovery_Agent.exe -token) and use the token you've copied earlier.

When you upgrade to Assets Discovery 7.0.3-Cloud/7.0.3 Data_Center or later, the agent token configured previously on each agent will be replaced by a unique token generated by the Agent and stored on the Discovery side. This token will be used for all further communications between the Discovery tool and the Discovery Agent. The original Agent token is used just to initiate the connection for the first time.

In case you want to revoke existing Agent tokens, select Generate token and then select Save token. After that, Discovery will not be able to trigger scans or collect data and a new Discovery token should be configured for the agents manually as described above.

Configuring a dedicated account for running Discovery Agent

By default, all Assets Discovery Agent services that run in the background under the NT AUTHORITY\SYSTEM account, grant extensive permissions, including unlimited access to the local machine. As this can pose a security risk if the Discovery Tool is compromised, we recommend that you use a dedicated administrator account to run this service on the Agent and grant the minimum required privileges. Learn which commands are executed by Assets Discovery

To change the account used by the service manually on each machine where the Agent is installed:

1. Search for and open services.msc from the Start menu. 
2. Locate the Agent service and then right-click the service and select Properties.
3. From the Log on tab, in the Log on as section, select the This account option and enter the credentials of the dedicated administrator account.
   

Manage Agents

You can manage all your configured agents from here and view the agents details including the version number and status of the agent (such as running, not available).

You can select one or more agents and perform the following actions.

Trigger scan

The discovery-tool will trigger selected Agents at the configured range to start a local scan.

Collect results

Select this to get data collected by agents to Discovery host.

Update agents

You can update all connected Discovery Agents (that are on version 7.0.0 or later) to the latest version directly from here, instead of navigating to each agent and updating them individually.