Network Discovery

Overview

⚠️ Subscription

Network Discovery is available exclusively with the Enterprise plan and requires an Advanced Agent (version 1.5.0 or higher). See Plans →

Network Discovery allows an Advanced Agent to automatically scan the network it is deployed in, detect active hosts, identify open ports, and report the results back to the platform. You can then create sensors from the discovered resources in a single click — turning a full network inventory into active monitoring in minutes.

How it works

1. You launch a discovery from the Onagre dashboard.
2. The Hub sends a scan task to the agent over its gRPC connection.
3. The agent performs three steps:
   • ICMP ping sweep — identifies which hosts are alive on the network.
   • TCP port scan — checks 50 well-known ports on each alive host.
   • Reverse DNS lookup — resolves IP addresses to hostnames when possible.
4. Results are sent back to the platform and displayed in the dashboard.
5. You select the resources you want to monitor and create sensors in bulk.

The entire process is non-intrusive and read-only — the agent never modifies anything on the scanned network.

Launching a discovery

Navigate to the agent detail page and open the Network Discovery tab.

Auto-detect network

Click Start Network Discovery. The agent automatically detects its primary network interface (the one with a gateway and the largest subnet) and scans it.

This is the simplest option — no configuration needed.

Target a specific network

Click Targeted Network Discovery to scan a specific subnet. Enter the network in CIDR notation (e.g. 192.168.1.0/24, 10.0.0.0/16) and confirm.

This is useful when the agent has access to multiple networks or when you want to scan a subnet that is not its primary interface.

💡 One at a time

Only one discovery can run per agent at a time. Wait for the current scan to complete before launching another.

Discovery results

Once the scan completes, the results appear in a table grouped by discovered host. For each host, Onagre suggests sensors based on what it found:

Each row shows the IP address, resolved hostname (if available), port number, and detected service name.

Ports scanned

The agent checks the following well-known ports:

If a port is open but not in the known list, it appears as unknown.

Creating sensors from results

1. In the results table, select the sensors you want to create. Use Select all to pick everything, or check individual rows.
2. A counter shows how many sensors are selected.
3. Click Create Selected Sensors.

Onagre creates all selected sensors with sensible defaults:

• All sensors are linked to the same agent.
• All sensors are tagged discovered for easy filtering.
• Integrations (notification channels) are inherited from your account settings.
• Sensors start monitoring immediately after creation.

Once sensors are created, the discovery is automatically archived.

Discovery history

After a discovery is archived, it appears in the Discovery History table at the bottom of the page. Each entry shows:

• Who requested the scan.
• When it was requested and completed.
• The scan duration.

History is retained for audit and reference purposes.

Summary