Network discovery

Network discovery lets an Advanced agent inventory the private network it runs in: which hosts answer, which ports are open, which services they expose. From the results, you create Ping, Port, Certificate and HTTP sensors in a few clicks.

Start a discovery#

1. Open the agent in Configuration → Agents, then its Discovery tab.
2. Click Start discovery and choose:
   • Auto-detect network — the agent scans the network of its main interface (the one with a gateway).
   • Specific network (CIDR)… — enter a range such as 10.20.0.0/24, for an agent that reaches several networks.
3. Wait for the scan to end: the page shows it in progress. Only one discovery runs per agent at a time.

The scan only reads: the agent pings the addresses of the range, tries to open a connection on 52 common ports of each host that answers, and looks up host names (reverse DNS). It changes nothing on your network, but it may be noticed by intrusion detection systems: warn your security team first. Only IPv4 networks are scanned.

Read the results#

Discovered hosts lists each host that answered, with its address, name when known, and open ports with the service usually found on them (ssh, postgresql, http…). For each one, Onagre suggests sensors:

Create the sensors#

1. Select the sensors to create, one by one or with Select all.
2. Click Create selected resources.

The sensors are created on this agent, named after the address (10.20.0.12, 10.20.0.12:5432, https://10.20.0.12…), with a 1.5-second timeout, Major severity and the tag discovered — search tag:discovered in Resources to find them. They are placed in your default service and environment.

The discovery is then archived.

Discovery history#

Discovery history, at the bottom of the tab, lists past discoveries: who requested them, when they were requested and completed, and how long they took.

Ports scanned#