Create discovery rules#

Discovery rules are used to automatically add entities to Discovery if the entity

matches a given search query, and
has direct or indirect relations to objects in specified workspaces or workspace types.

Note

By default, each run can discover up to 2500 entities. To change this, see “Tune discovery limits” in Update platform_settings.py.

A rule must be Enabled for it to take effect. See Manage discovery rules.

Create a discovery rule#

Note

Required fields are marked with an asterisk (*).

Start creating a rule:

In the Create discovery rule view, fill out the following fields:

Field	Description
Name*	Name of rule.
Description	Short description. Should contain context and information on what this rule does.
Enabled	Select this to enable the rule immediately after saving.
Search query*	Enter a search query for your discovery rule. See Search query syntax.
Correlated workspaces	Select one or more workspaces. This rule matches an entity if it has direct or indirect relationships to objects found in these workspaces.
Correlated workspace types	Select one or more workspace types. This rule matches an entity if it has direct or indirect relationships to objects found in these workspace types.

Once done:

Select Save to save this rule.
Select Save > Save and new to save this rule and start creating a new rule.
Select Save > Save and duplicate to save this rule and start creating a new rule using settings from this rule.