To collect new record/pool data, execute the steps below on a scanning appliance (not the consolidator that receives the scan result).
1- In Administration > Discovery Configuration, set Recording Mode to "Record" 2- Enable the session logs if required:
A- Discovery 11.x only) In Linux/UNIX case, enable session logs:
A - Go to Discovery -> Credentials and select the credential being used for the host(s) where the problem occurs A2 - In the Options section, change "Session Logging" to Enabled. Click "Apply"
B- Discovery 12.x and following: session logs will have to be enabled from the Discovery Run configuration instead
3- (Only if it is pertinent or requested by support) Enable the requested debug logs in the appliance, the outpost or the proxy 4- (Recommended) Wait for the end of the previous scans. This is mainly to reduce the size of the logs (if requested) and speed up the next step. 5- Use the suitable documented procedure to scan what is meant to be recorded with the session logs enabled. 6- Wait for the end of the recorded scan 7- (Recommended) Check that the recorded scan result contains what was meant to be recorded 8- In Administration > Discovery Configuration, set Recording Mode to "Off" 9- In Administration > Appliance Support, click on "Create" (at the bottom of the page) 10- (Recommended) Set "Name" to a case number 11- Tick the checkboxes to collect the logs only if it is pertinent or requested by support. For example:
x Logs from ‘myProxyUsedInTheStepsAbove' proxy x Discovery x Reasoning
12- Under "Logs By Date", select the date range for the scan that was performed 13- Depending on the type of scan:
A- For IP scans:
A1 - Check the boxes below
x Record & Pool Data x Session logs
A2 - Specify an ip range that includes the ips scanned in the steps above
B- For Cloud/API scans:
- Do NOT tick the checkbox "Record and Pool data" - Tick the relevant checkbox to the record, e.g: Alibaba cloud, kubernetes etc...
16- Click "Create" at the bottom of the page 17- Wait for the new archive to appear on the "Appliance Support" page 18- Send it to Support