How CIM Discovery works

  • Release version: Xanadu
  • Updated August 1, 2024
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of How CIM Discovery works

    This process describes how ServiceNow's CIM Discovery classifies Common Information Model (CIM) storage systems during network discovery. It involves detecting WBEM services on target systems, retrieving relevant CIM namespace data, and using specialized probes to extract detailed storage information.

    Show full answer Show less

    How CIM Discovery Operates

    • The Shazzam probe initiates the wbem port probe as part of network discovery, scanning specific ports (SLP 427, CIM 5989, 5988) for WBEM service activity.
    • The wbem port probe uses an SLP query to detect the presence of the wbem service by querying the Service Registry.
    • Once detected, the wbem probe launches a scanner that retrieves service attributes and CIM interop namespaces from the CIM servers on the network.
    • The gathered namespace information is appended to the port probe results and passed to the CIM Classify probe.
    • The CIM Classify probe explores the CIM servers in depth, extracting critical data such as VMware ESX serial numbers and SAN-NAS connector relationships.

    Key Components and Configuration

    • wbem port probe: Stores retrieved CIM data in the CIM Classification [discoveryclassycim] table and is configurable via Discovery Definition > Port Probes.
    • SLP Query: Detects wbem service presence and gathers its attributes; configurable under the wbem port probe's Service Registry Queries.
    • CIM Classify probe: Uses appended SLP data including namespaces to perform detailed CIM server classification. Accessible under Discovery Definition > Probes.
    • Namespaces: The system property mid.cim.interop.namespace defines default storage namespaces. Customers using storage vendors with custom namespaces should add these to the property’s comma-separated list to ensure proper discovery.

    SMI-S and CIM Probes and Sensors

    A suite of CIM and SMI-S probes and sensors enable detailed discovery of storage infrastructure components, including but not limited to:

    • CIM - Identity: Identifies systems via CIM according to SMI-S standards.
    • SMI - Array probes: Collect information on controllers, disks, file shares, pools, ports, and volumes in storage arrays.
    • SMI - Fabric and Fibre Channel Switch probes: Discover SAN fabrics, zone sets, switches, and related connections.
    • SMI - NAS Head probes: Enumerate NAS file servers, virtual file servers, IP addresses, and file shares.
    • SMI - Storage Server: Retrieves SAN and NAS arrays and servers details.
    • SMI - WBEM Service: Extracts WBEM service information including profiles and SMI-S versions.

    Practical Benefits for ServiceNow Customers

    • Enables automated, accurate classification of complex storage environments across SAN and NAS infrastructures.
    • Supports multi-vendor environments by allowing customization of namespaces for comprehensive discovery coverage.
    • Provides detailed asset and relationship data critical for Configuration Management Database (CMDB) accuracy and IT operations.
    • Facilitates visibility into storage system components, helping improve infrastructure management and troubleshooting.

    This is the processing flow for classifying Common Information Model (CIM) storage systems.

    Processing flow

    1. The Shazzam probe launches the wbem port probe as part of network discovery.
    2. The wbem port probe detects activity on target ports SLP 427, CIM 5989 and 5988, and then examines the Service Registry Queries related list, at Discovery Definition > Port Probes, for the SLP query. The base system provides this query to detect the service:wbem service type, which indicates the presence of an SLP server.
    3. The Shazzam probe launches a scanner for the WBEM service type. The scanner retrieves:
      • The attributes of the service from the SLP server.
      • The interop namespaces of CIM servers in the network.
    4. The scanner appends the namespace values it finds to the port probe results.
    5. The wbem port probe appends the SLP data it carries to the CIM Classify probes.
    6. The CIM Classify probe uses that information to explore the CIM servers.
      Figure 1. CIM Shazzam Processing Diagram
      CIM Shazzam Processing Diagram

    The wbem port Probe

    The wbem probe stores the data it retrieves in the CIM Classification [discovery_classy_cim] table. To view the wbem port probe, navigate to Discovery Definition > Port Probes.

    Figure 2. wbem port probe record
    wbem port probe record

    SLP query

    The SLP query detects the wbem service (service:wbem) on an SLP server and gathers the attributes of the service. To view the SLP Query record, open the wbem port probe record and select SLP Query from the Service Registry Queries related list.

    Figure 3. SLP Query record
    SLP Query record

    CIM - Classify probe

    The wbem port probe appends the SLP data it carries, including namespaces, to the CIM - Classify probe before launching it. The CIM classification probe extracts VMware ESX serial numbers and connector relationships between the SAN and NAS components from CIM Servers in the network.

    To access the CIM classification probe, navigate to Discovery Definition > Probes and select CIM - Classify from the list of probes.
    Note:
    The mid.cim.interop.namespace system property defines four default storage namespaces:
    • interop
    • root/interop
    • root/pg_interop
    • pg_interop
    If you’re using multiple storage vendors with custom namespaces not specified as one of the defaults, add the new namespaces to the comma-separated list in this property. If you intend to continue using any of the default namespaces, make sure to include them in the property.
    Figure 4. CIM - Classify probe record
    CIM - Classify probe record

    SMI-S and CIM probes and sensors

    Table 1. SMI-S and CIM probes and sensors
    Probe/Sensor Description
    CIM - Identity Identifies a system via CIM per SMI-S.
    SMI - Array - Controllers Retrieves controller information.
    SMI - Array - Disks Retrieves storage disk information.
    SMI - Array - File Shares Enumerates NAS file shares from a storage server.
    SMI - Array - Pools Retrieves storage pools.
    SMI - Array - Ports Retrieves storage ports.
    SMI - Array - Volumes Retrieves storage volumes.
    SMI - Fabric Retrieves SANs, fabrics, zone sets, zones, zone aliases, endpoints, and connections.
    SMI - Fibre Channel Switch Retrieves FC switches.
    SMI - NAS Head - Component Systems Retrieves all virtual file servers in a NAS head profile.
    SMI - NAS Head - File Server IPs Retrieves IP addresses for each NAS file server.
    SMI - NAS Head - File Servers Retrieves NAS file servers such as Common Internet File System (CIFS) and Network File System (NFS).
    SMI - NAS Head - File Shares Retrieves file shares for each NAS file server.
    SMI - Storage Server Retrieves SAN and NAS arrays and servers.
    SMI - WBEM Service Retrieves WBEM Service information such as profiles and SMI-S version.