I'm trying to create a discovery action that adds a discovered host to the 'Discovered hosts' Host group ONLY if it has not been seen before.
The idea is to ping sweep the subnet looking for new/unauthorized hosts and have them added to a host group that we'll monitpr and take action on investigation (possibly someday even alerting when a new host appears). I've currently only have one condition (discovery status equals Up) which does an initial seeding of the host group, but once we manually move the hosts out to their final host grouping, discovery will re-add them every time it finds the host. We want it to only add it to the temporary host group 'once' no matter how many times the host is found via ping.
I tried playing with Action rules but the condition options aren't documented as far as I can tell. What is the difference between "Discovery status = up/down/discovered/lost" ?
Any suggestions ?
The idea is to ping sweep the subnet looking for new/unauthorized hosts and have them added to a host group that we'll monitpr and take action on investigation (possibly someday even alerting when a new host appears). I've currently only have one condition (discovery status equals Up) which does an initial seeding of the host group, but once we manually move the hosts out to their final host grouping, discovery will re-add them every time it finds the host. We want it to only add it to the temporary host group 'once' no matter how many times the host is found via ping.
I tried playing with Action rules but the condition options aren't documented as far as I can tell. What is the difference between "Discovery status = up/down/discovered/lost" ?
Any suggestions ?