Automatically scan machine assets

Preview

This product is covered by the Pre-GA Offerings Terms of the Google Cloud Terms of Service. Pre-GA products might have limited support, and changes to pre-GA products might not be compatible with other pre-GA versions. For more information, see the launch stage descriptions.

During this launch phase, this product is subject to Google Cloud's Data Processing and Security terms.

This page describes how you can let discovery client automatically identify the machine assets in your infrastructure with the IP range scan feature. If you prefer to manually add your machines IP addresses, see Manually add machine assets.

Before you begin

• To scan your infrastructure, create, install, and authorize discovery client first.

About IP range scan

IP range scan allows you to scan the IP addresses of your infrastructure and automatically add assets to your credential. Discovery client first pings all the IP addresses in the ranges provided, and then begins to authenticate to those IP addresses using the credentials provided for WMI for Windows or SSH for Linux.

Discovery client then attempts to access each asset sequentially using the credentials provided. After the login succeeds, each asset is placed under the first successful credential.

When the scan completes, discovery client starts collecting data from the assets that have successful credentials matches.

Note: Before you start an IP range scan, you need to create a credential with either a username and password, or SSH key.

To access the IP range scan feature, in discovery client click Add assets > Machine > Scan IP address ranges from the top of the screen. To use this feature, you need to agree with the terms and conditions.

Adding IP address ranges to scan

You can manually add IP ranges to scan, or upload them in bulk with a CSV file.

To manually add an IP range, follow these steps:

1. In the discovery client, click Add assets > Machine > Scan IP address ranges.
2. From the Scan IP address ranges page, select Add IP address ranges > Enter ranges.
3. In the IP Ranges section, enter the initial and final IP addresses of the range in the fields provided. Note that you can add at most a /16 subnet or 65,536 IP addresses to a single range.
4. You can define additional ranges by clicking Add IP range.
5. Click Start IP scan. Then, from the pop-up window, click Start scan.

After you enter your IP address ranges, they appear in the IP address ranges list. Scanning starts automatically.

To import a set of IP ranges in bulk, follow these steps:

1. In the discovery client, click Add assets > Machine > Scan IP address ranges.
2. From the Scan IP address ranges page, select Add IP address ranges > Upload CSV of ranges.
3. Click Download IP address range template and fill in the CSV template with the IP ranges that you want to scan.
4. After you're finished, from the Upload section select IP address range file from the dropdown menu and upload the filled-in CSV file into the discovery client.
5. Click Save, then, from the pop-up window, click Dismiss.

If you want to import a list of specific IP addresses for your assets, rather than relying on the IP range scan, follow these steps:

1. In the discovery client, click Add assets > Machine > Scan IP address ranges.
2. From the Scan IP address ranges page, select Add IP address ranges > Upload CSV of ranges.
3. Click Download IP address template and fill in the CSV template with the IP ranges that you want to scan.
4. After you're finished, from the Upload section select IP address file from the dropdown menu and upload the filled-in CSV file into the discovery client.
5. Click Save, then, from the pop-up window, click Dismiss.

Starting or stopping a scan

All IP ranges automatically start scanning after you create them. To find your assets, you can start or stop scanning individual IP ranges or all ranges at once. Select one or more IP address ranges, then click Start Run or Stop Run from the top of the page.

The Status of your IP ranges changes to Scheduled to collect or Stopped, and the list of IP ranges displays the number of IP addresses that were scanned and other statistics about your assets.

Viewing and exporting the results

To view the results of a scan for a specific IP address range, select the range from the list, then click Edit. The IP addresses found by the discovery client appear in the Scan details section.

The Scan status section shows the following statistics about the scan.

• Total scanned. The number of IP addresses scanned.
• Successful. The number of IP addresses that discovery client was able to ping, log in to, and add to a credential for collection.
• Authentication failed. The number of IP addresses that the discovery client was able to ping, but was not able to log in to with any of the credential sets provided.
• Duplicate. The number of IP addresses that the discovery client was able to ping and log in to, but where the asset's hostname and domain already exist in one of the credentials for collection.

When the discovery client finishes the scan, you can export the results in bulk in a CSV file. Select the IP ranges you want to export from the list, then click Download results to download the report.

You can use the information in the results report to identify additional credentials that you might need to add. Failures to correctly identify assets can be due to incorrect credentials or to firewall rules blocking the scan.

Editing and removing assets

To edit the information about an individual asset, follow these steps:

1. From the list of assets in the group, select the asset you want to modify, then click Edit asset.
2. From the Edit page, modify the asset name, IP address, OS type, or asset credentials.
3. Click Save to confirm your changes.

If you don't want to send the information about a specific asset to the Google Cloud Migration Center portal, you can delete it from the list. To remove one or more assets from the list, select the checkbox, then click Delete asset.

What's next

• Learn how to manually add machine assets to discovery client.