Auto-discovery domain

Auto-discovery Scan Entity

This entity identifies when a scan executed.

Attribute	Description
Scan Timestamp	The time the scan executed.
Original Timezone	The UTC offset. This is done in particular for aggregators that have collectors in different time zones and so that activities that happened hours apart do not seem as if they happened at the same time when imported to the aggregator. For instance, on an aggregator that aggregates data from different time zones, you can see session start of one record that is 21:00 with original timezone UTC-02:00 and another record where session start is 21:00 with original timezone UTC-05:00, This means that these events occurred 3 hours apart, but at the same respective local time (9 PM).

Attribute

Description

Scan Timestamp

The time the scan executed.

Original Timezone

The UTC offset. This is done in particular for aggregators that have collectors in different time zones and so that activities that happened hours apart do not seem as if they happened at the same time when imported to the aggregator.

For instance, on an aggregator that aggregates data from different time zones, you can see session start of one record that is 21:00 with original timezone UTC-02:00 and another record where session start is 21:00 with original timezone UTC-05:00, This means that these events occurred 3 hours apart, but at the same respective local time (9 PM).

Discovered Host Entity

This entity identifies a discovered host.

Attribute	Description
Server IP	IP address of the discovered host.
Server Host Name	Host name of the discovered host.
Original Timezone	The UTC offset. This is done in particular for aggregators that have collectors in different time zones and so that activities that happened hours apart do not seem as if they happened at the same time when imported to the aggregator. For instance, on an aggregator that aggregates data from different time zones, you can see session start of one record that is 21:00 with original timezone UTC-02:00 and another record where session start is 21:00 with original timezone UTC-05:00, This means that these events occurred 3 hours apart, but at the same respective local time (9 PM).

Attribute

Description

Server IP

IP address of the discovered host.

Server Host Name

Host name of the discovered host.

Original Timezone

The UTC offset. This is done in particular for aggregators that have collectors in different time zones and so that activities that happened hours apart do not seem as if they happened at the same time when imported to the aggregator.

For instance, on an aggregator that aggregates data from different time zones, you can see session start of one record that is 21:00 with original timezone UTC-02:00 and another record where session start is 21:00 with original timezone UTC-05:00, This means that these events occurred 3 hours apart, but at the same respective local time (9 PM).

Discovered Port Entity

This entity identifies a discovered port.

Attribute	Description
Port	Discovered port number.
Probe Attempted	Indicates if a probe for a supported database service has been attempted on this port. T=yes, F=no.
Port Type	Indicates the port type (usually TCP).
DB Type	If a probe of the port has found a supported database type, indicates the type (DB2®, Informix®, MS SQL Server etc.)
Probe Timestamp	The date and time that this specific port was probed.
Original Timezone	The UTC offset. This is done in particular for aggregators that have collectors in different time zones and so that activities that happened hours apart do not seem as if they happened at the same time when imported to the aggregator. For instance, on an aggregator that aggregates data from different time zones, you can see session start of one record that is 21:00 with original timezone UTC-02:00 and another record where session start is 21:00 with original timezone UTC-05:00, This means that these events occurred 3 hours apart, but at the same respective local time (9 PM).