Automatically remove only old vanished services (ignore Switch ports which are temporarily DOWN)

General
1

The documentation contains the following hint:

Alongside the additions, in Mode you can also choose to delete superfluous services, or even to delete all existing services and perform a complete new discovery (Refresh). Both options should be used carefully! A vanished service can indicate a problem! The discovery check will simply delete such a service and lull you into thinking everything is in order. The refresh is especially risky. For example, the check for switchports will only take ports that are ‘up’ into the monitoring. Ports with a status of ‘down’ will be perceived as vanished and quickly deleted from the discovery check!

So how do I remove a vanished service only if it has this state for 30 days?

2

I know this doesn’t solve your problem (yet), but the following feature requests address some of the issues involved and thus may solve yours as well:

1 Like
4

Ok, “solved” it as follows:

image

By that it removes all vanished services except those which contain the word “Interface” (Switch Ports).

Finally this means a “growing” amount of monitored ports, which are permanently DOWN, but this is a rare case and could be “reset” by disabling the Service Filter, waiting until all vanished “Interface” services have been removed and re-enabling the Service Filter again.

5

I am sure you considered the option “Match port states” in the discovery rule “Network interface and switch port discovery” You can discover also ports which are down. This way they dont vanish:

image

6

Keep in mind that only one Periodic service discovery Rule per device will be executed. This means that if two or more rules overlap, only one of all the matching rules will be executed (first match).

If, for example, you have a general rule for all devices that adds services and a specific rule for removing vanished services on a specific group of devices the more general rules will not be executed on this specific group of devices. So in the end you never really know which rules will be executed on which devices.

7

This is the opposite of my target as I don’t want to monitor ports which are permanently down.

8

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.