Open-AudIT
https://www.open-audit.org/phpBB3/

[solved] Device changing identity
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=6405
Page 1 of 1

Author:  tlmedia [ Sun Feb 08, 2015 11:02 am ]
Post subject:  [solved] Device changing identity

Hello,

Running version 1.5.3 on CentOS 6.6.

I have a series of Cisco Wireless Access Points. I'm running a Discovery via command line. It discovers most of my devices just fine. But one particular entry is flipping back and forth between two physical devices.

I have 10.10.10.51 (device1) and 10.10.10.52 (device2).

But there is only one entry in OpenAudit. When I run this:
audit_subnet.sh subnet=10.10.10.51 the result will list the entry as device1
audit_subnet.sh subnet=10.10.10.52 the result will list the entry as device2

But I can't get it to recognize both entries in OpenAudit.

Any way I can fix this? Or delete the bad entry.

Author:  Mark [ Mon Feb 09, 2015 4:32 pm ]
Post subject:  Re: Device changing identity

I would delete the bad entry for a start.
Then have a read of the wiki page that details how Open-AudIT decides on a unique device (How do we create a system key?).
[url]https://community.opmantek.com/display/OA/Information+about+how+Open-AudIT+processes+and+stores+data[/url]
I think it would be matching the two devices (incorrectly) "somehow"...
Then try running two SNMP Discoveries (or a single one using 10.10.10.51-52) from the web interface. menu -> Admin -> Discovery -> Discover a Device using SNMP.
When using the web interface, do you still get two devices being combined?

Author:  tlmedia [ Tue Feb 10, 2015 10:55 am ]
Post subject:  Re: Device changing identity

Thanks that helped. Setting the variable name_match to 'n' then deleting/re-scanning fixed the problem!

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/