Disappeard network devices in SCOM 2012 R2
I am 2.5 lvl SCOM specialist implementing SCOM monitoring solution for our customer.
we are missing several network devices from time to time, they disappear from inventory with no trace.
These are switches by cisco (Cisco-N9K), F5. Certified devices for SCOM.
The devices were correctly discovered by network discovery and were for some time monitored by ports 161, 162. We set port monitoring for them, some time later the whole device is gone.
What hurts us the most that we do not see any input in log Console (Monitoring\Task Monitor) or even in database about the deletion.
We believe that once the network device is deleted from inventory, it takes away also all records in database as well (both PROD and DWH), even the traces of the deletion are gone.
Strugling with this every day, I have found some coincidence that for instance when I put some device to discovery rule and then remove device from inventory, it is removed from discovery rule as well! This seems like bug of this system, once device is deleted somewhere it removes it completely from system in all fields. Any idea?
Patrick Seidl (s2) commented
I am the supporting consultant of Jan and in the meantime we found out that some of the devices (probably all, not checked) share the same MAC address and since the MAC is the DeviceKey property (= unique identifier) it is clear what happens... every time the discovery runs it updates the device with the properties of the one or the other device with the same MAC.
@MSFT: is there a chance to change the standard behavior (change devicekey to IP or whatever could make sense here)?