Here are some answers to frequently asked questions about device discovery.
- How can I tell when a device was discovered?
- Why can't I find a device?
- What is a custom device?
- What is an inactive device?
- How do I check my device limit and device counts?
- What is the watchlist?
- Can I export device information to a CSV file?
- Can I change the role of my device in the ExtraHop system?
- Does selecting a new role change the type of data the ExtraHop system collects from the device?
- Can I change the name of my device in the ExtraHop system?
The Device Overview page displays the date and time the device was first discovered by the ExtraHop system. The amount of time from discovery also appears, such as 3 days ago or 2 months ago. A device that is first seen less than five days ago is labeled as New.
- The device is outside of a locally-monitored broadcast domain and the ExtraHop system is not configured to discover remote traffic through either a DHCP relay agent with L2 Discovery, Remote L3 Discovery, or a custom device.
- The device has not been active since the ExtraHop system was deployed. An active device is one that sends data over the wire to other devices. Devices that only receive traffic are not discovered.
- All traffic for the device is being filtered by IP address or port filters on the ExtraHop system.
Custom devices are manually created in the ExtraHop system to collect metrics across IP addresses and ports as a single device. You might create a custom device to track individual devices outside of your local broadcast domain or you might create a single custom device to collect metrics for several known IP addresses for a remote site or cloud service. You can add a custom device to the watchlist to guarantee that the custom device receives Advanced Analysis.
An inactive device is a device that has not sent or received data over the last 30 minutes.
Yes. Click Assets at the top of the page and then click Devices in the left pane. In the upper right corner of the page, click the command menu and then click CSV. A CSV file downloads, which contains each device's name, MAC address, IP address, discovery time, and description (if available).
Yes, you can change a device role. Although the ExtraHop system automatically assigns a device role to newly discovered devices based on observed traffic, you can click Edit Properties from the Device Overview page to change the role.
For more information, see Device roles.
No, this option only provides an opportunity to manually classify which role the device plays on your network.