Agent scan result (.dat file) is deleted immediately after scheduled scans so Discovery couldn't collect data from Agent 7.0.5

XMLWordPrintable

    • 3
    • Severity 2 - Major
    • 20

      Issue Summary

      Agent scan result (.dat file) is deleted immediately after scheduled scans so Discovery couldn't collect data from Agent 7.0.5

      Steps to Reproduce

      1. Install and set up Discovery Agent as per Set up Assets Discovery Agent.
      2. Enable Discovery as a service to collect data from Agent as per Collecting data from agents.
      3. Allow a scheduled Agent scan to happen and verify the status of the data collection after 10 minutes (default interval set in Discovery)

      Expected Results

      The .dat file generated by Agent is collected by Discovery as expected

      Actual Results

      The .dat file is deleted immediately after its creation and hence, Discovery finds no file to be collected.
      With the debug enabled on Agent, we can see the following in the log.

      11/8/2024 12:27:01 PM: [Normal] Discovery Agent local scan finished in 30 seconds.
11/8/2024 12:27:01 PM: [Debug] Generating save file name was started
11/8/2024 12:27:01 PM: [Debug] Generating save file name was successfully
11/8/2024 12:27:01 PM: [Debug] Path already exists
11/8/2024 12:27:01 PM: [Normal] saving file: C:\Program Files\Atlassian\Discovery Agent\scans\DBB12_Hosts_2024-11-08_1227_0369.dat to folder C:\Program Files\Atlassian\Discovery Agent\scans | binary = True
11/8/2024 12:27:01 PM: [Debug] File C:\Program Files\Atlassian\Discovery Agent\scans\DBB12_Hosts_2024-11-08_1227_0369.dat saved successfully in path C:\Program Files\Atlassian\Discovery Agent\scans
11/8/2024 12:27:01 PM: [Debug] Decrypt credentials was started
11/8/2024 12:27:01 PM: [Debug] Decrypt credentials was successful
11/8/2024 12:27:01 PM: [Debug] File C:\Program Files\Atlassian\Discovery Agent\Agent.bak deleted successfully
11/8/2024 12:27:01 PM: [Debug] Cleaning scan folder
11/8/2024 12:27:01 PM: [Normal] deleting file: C:\Program Files\Atlassian\Discovery Agent\scans\DBB12_Hosts_2024-11-08_1227_0369.dat
11/8/2024 12:27:01 PM: [Debug] File C:\Program Files\Atlassian\Discovery Agent\scans\DBB12_Hosts_2024-11-08_1227_0369.dat deleted successfully

      Discovery tried to collect the file later but no file is available

      11/8/2024 12:31:21 PM: [Debug] Server - Connection from 10.227.30.232:49908 changed to Connected
11/8/2024 12:31:21 PM: [Debug] Server - Send Message: HELLO | ToRemoteEndPoint: 10.227.30.232:49908
11/8/2024 12:31:21 PM: [Debug] Server - Receive Message: HELLO | FromName: Discovery-Service-3BB82 | FromID: 3BB82 | FromRemoteEndPoint 10.227.30.232:49908 | ObjSize: 0
11/8/2024 12:31:21 PM: [Debug] Decrypt credentials was started
11/8/2024 12:31:21 PM: [Debug] Decrypt credentials was successful
11/8/2024 12:31:21 PM: [Debug] Decrypt credentials was started
11/8/2024 12:31:21 PM: [Debug] Decrypt credentials was successful
11/8/2024 12:31:21 PM: [Debug] Send Data Available: False

      Workaround

      As this issue is only affecting scheduled Agent scans, you can run a manual scan in the Agent server by running Discovery_Agent.exe -s or trigger scan and collect data from the Discovery

      Versions Tested

      Discovery 7.0.4 - not reproducible

            Assignee:
            Unassigned
            Reporter:
            Michelle Chin (Inactive)
            Votes:
            2 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: