I may be missing a setting somewhere, but it doesn't appear that our discovery is updating any existing records with new information.
For example, we had several computers that had an old antivirus application on. I've been able to update to the new AV on all of them.
Re-ran the discovery in order to update, and they still show the old information even though the audit shows that the record was last seen after I ran the discovery.
It updates the run time, showing that it knows the computers were rebooted recently, but that's the only thing it updates.
Is there a setting not set correctly? I'd hate to think that the only was around this is to delete ALL my records in order to get the updated information.
I'd check the discovery log on the device(s) in question. If software changes are detected, you'll likely see an entry like the below.
Inserting change logs (software) for 192.168.88.123 (computer_name)
You should also see entries in the devices changelog.
Item added to software - name is kernel, version is 2.6.32-696.13.2.el6
Detecting these changes is what Open-AudIT is all about!
Thanks! Where do I find those discovery logs on the devices?
View the device details, then in the menu on the left side.
Powered by a free Atlassian Confluence Open Source Project License granted to Opmantek. Evaluate Confluence today.