Notifications

12 views

Description

Discovery to NGINX web server, Probes 'NGINX – Version' and 'NGINX – Get Configuration' not trigger

Nginx - Version -> https://xxx.service-now.com/nav_to.do?uri=discovery_probes.do?sys_id=997b1168d7432100a866ee5b5e61031e
Nginx - Get Configuration -> https://xxx.service-now.com/nav_to.do?uri=discovery_probes.do?sys_id=7920e49ed7722100a866ee5b5e610399

Both probes related to
Process Classification: NGINX
https://xxx.service-now.com/nav_to.do?uri=discovery_classy_proc.do?sys_id=1f0340dad7722100a866ee5b5e610357

Steps to Reproduce

Run discovery to NGINX web server where Nginx is installed through different configuration path other than the default path '/etc/nginx/nginx.conf'

The ps -ef | grep nginx command on the server gives an output like below:

nginx: master process nginx -c /home/ubuntu/<file_name>.conf

Workaround

Need to modify Process Classification "NGINX"

Link:

https://<INSTANCE_NAME>.service-now.com/nav_to.do?uri=discovery_classy_proc.do?sys_id=1f0340dad7722100a866ee5b5e610357

 

Change the line cmd = ''; to cmd = 'nginx'; in 'Nginx' process.

Existing code
-------------------
// Command for nginx is the first parameter
var cmd = discoUtil.getParameterByIndex(0);
if (cmd.indexOf('-') == 0)
cmd = '';

New code
-------------------
// Command for nginx is the first parameter
var cmd = discoUtil.getParameterByIndex(0);
if (cmd.indexOf('-') == 0)
cmd = 'nginx';


Related Problem: PRB1383994

Seen In

SR - Security - Integration Framework - Madrid 2019 Q2
SR - Security - Support Common - Madrid 2019 Q2
SR - Security - Support Orchestration - Madrid 2019 Q2
SR - SIR - ElasticSearch Integration - Madrid 2019 Q1
SR - SIR - Exchange Online Integration - New York 2019 Q3 2
SR - SIR - Security Incident Response - Madrid 2019 Q2
SR - SIR - Security Incident Response PA Content - New York 2019 Q3
SR - SIR - Security Incident Response UI Patch - London 2019 Q2 v.6.2.3
SR - SIR - Store SecOps Setup Assistant - Madrid 2019 Q2
SR - SIR - Store Threat Core - Madrid 2019 Q2
SR - SIR - Store Trusted Security Circles Client - New York 2019 Q3
SR - VR - Qualys - New York 2019 Q3
SR - VR - Vulnerability Response - New York 2019 Q3
SR - VR - Vulnerability Response PA Content - Madrid 2019 Q2

Intended Fix Version

Orlando Patch 3
Paris

Safe Harbor Statement

This "Intended Fix Version" information is meant to outline ServiceNow's general product direction and should not be relied upon in making a purchasing decision. The information provided here is for information purposes only and may not be incorporated into any contract. It is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. The development, release, and timing of any features or functionality described for our products remains at ServiceNow's sole discretion.

Associated Community Threads

There is no data to report.

Article Information

Last Updated:2020-04-02 02:07:57
Published:2020-03-06