¶ Identifying inconsistent assets
This is essential step after installing and configuring platform.
Before do any deeper analysis, we need to be sure about asset naming and their inconsistencies.
In real life, this could be a nightmare. For example, for incident reporting. All objects within network and related tools should be in sync for correct and quick responses.
¶ What is "inconsistent" asset?
In short, inconsistent asset is object within your network, which is not fully in sync by all possible collections. It can be even duplicated or missing object.
¶ Example1 - Missing DNS record
This is probably one of the most common issue. You deploy host and forget to add DNS record for DNS domain. Other scenario is that DNS forward record is known, but reverse record is missing.
¶ Example2 - Missing CMDB entry
There is some server deployed but there is no information within CMDB.
¶ Example3 - Inconsistent name
Due to some human error or configuration issue, same asset has different names within different sources. Like local hostname on notebook is "My-notebok" but CMDB name is "Mynotebook".
¶ Example4 - Inconsistent IP
There are more active assets within CMDB with same IP address. Or there is other IP collected by Ansible and saved within CMDB.
¶ FCP collections
There are many modules and jobs which can help to identify and report inconsistencies within network.
You can use other modules or just part of them. See installation and configuration guide first.
¶ Nmap
Let us nmap network and import to FCP. Use your local ranges.
nmap 192.168.1.0/24
fcpc nmap import localscan.xml
¶ DNS
Let us use DNS module to resolve IPs to names
fcpc dns ips-to-names
And resolve it back to IPs
fcpc dns fqdns-to-ips
¶ iTop
Let us index all assets within CMDB
fcpc itop download-and-import-all
¶ FCP jobs to find inconsistencies
Let us run all required jobs to process data.
fcpc job execute assettagger,assetlinker,personlinker
¶ See reports
First, let us find all hosts which have inconsistent name
fcpc search ci+ tag=sys:inconcistent:hostname
¶ Show specific inconsistency
¶ Let us find all hosts not documented within CMDB
fcpc search nmaphost ~not-is itophost