Idea ID 1674176
Customer wants that discovery sets DMZ flag true for the servers whose ip address belong to DMZ subnets. _
there any other way that discovery can do job, such as ip ranges on probe has description. is there any way to populate this info on the ip that discovered by icmp job?
Using Greater or less opearators for string attibutes is not correct(the results may be unexpected). In modelling guide there is a note
Note: When comparing attributes of type string, the comparison is based on the ASCII values of the string characters.
Name attibute is of type string.
Because of these operators the tql results may be wrong. I would suggest to remove the 2 mentioned operators.
Make a small test only for a smal subset Ips of data using only Like operator. Is the result the expected one?
If so proceed by adding the others. Maybe customer can create 2 enrichments one for range x.x.x.0/22 and another for x.x.x.x/19.
Also if possible I would suggest to enhance the discovery scripts to set the DMZ flag to true directly from discovery if possible.
The workaround is to use enrichments however this has downsides related to configuration and by adding a lot of enrichments can impact performance.
Ideally this data should be retrieved using discovery jobs. Check with customer if is possible to retrieve this data and provide the steps or create an ER. Case was elevated as a CPE, however instruction looks ER.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.