1

I’ve had a lot of issues with Spiceworks inventory since the day I began using it (years). For the most part it’s worked but it’s always been a mess. I noticed the other day that some new PC’s I deployed aren’t being picked up in scans. Nothing is there by name or IP. I reset my groups which didn’t help. My synced AD groups are all empty with devices sitting in the default Spiceworks groups. I wouldn’t mind blowing my whole inventory away and starting over but I would lose a lot of relational data like tickets and asset tags. Can anyone give me some advice what to do? Would be great to have a functional and accurate inventory but it’s never been that way, always a perpetual mess.

4 Spice ups
2

Assuming these are windows devices;

File and printer sharing and pings need to be enabled

This will allow SW to see them.

My BA here covers the rest

If you use DHCP for clients, make sure you have no stale DNS records otherwise you m at have devices updating, but not the ones you think they are

1 Spice up
3

Thanks Rob all those things are good. More i think about it the recent issues began when I moved everything to VMWare.

4

Rod.
What does the relevance to VMware have to do with anything?

5

Not one of my virtual servers shows up in inventory. None of them.

6

Does SW see the IPs, are you scanning those ranges?

Guest VMs need to be scanned like any other, not just the host, if you can ping them from your SW server, and the range is included but nothing shows during a scan, do you have any IDS/IPS on your network?

7

Just at the perimeter. I scan all the ranges and I can RDP, browse directories, etc. It’s all the same subnet they were before.

8

Has your SW IP changed?

If so my guess is that needs to be added to a trusted list on your IDS/IPS system, otherwise it could be flagged as an attack and dropped.

9

IP has not changed and I am not seeing any IPS events like you describe in my firewall logs. Very annoying, sorry Rod.

10

Add a single IP as a new device to be scanned, one you know is online and live, disable the other scan ranges and scan that one IP.

Give it 10 minutes, does it show, does SW scan even find a device on that IP?

11

I will give it a try!

12

Nothing, bizarreCapture.PNG

13

That would suggest something is blocking SW scans or the ping is being dropped.

Nothing on the clients changed, AV, GPO etc.?

14

We use Sophos. I can’t think of anything that has changed. It may be the group that PC is part of but I can’t think of anything in GP’s that would cause it.

15

If SW server can ping the device, it should be able to scan it, it usually cant if something blocks port scans.

None of the devices are on an exclude list are they?

16

Ping no problem from the server. No exclusions in any of our scans.
Capture.PNG

17

Do you have the ability to install a clean SW on another server and run the same scans to see what results you get?

Leave the existing as is, I’m curious to see if the same behaviour happens, meaning it is likely a issue with something on your network or specific to this box.

1 Spice up
18

I can do that but won’t be tonight. Thanks for the help.

19

I had some time and it looks like new SW server picked up those devices immediately.Looks like all my VM servers too.

1 Spice up
20

So we know the issue is related to your other setup, perhaps a DB corruption, I will tag support in case you want them to take a peek

While we wait for them to join us, can you go to settings, manage apps, disable all and restart SW, this turns off all plugins - run a scan and see if this works, if it does you now need to figure out which plugin is causing the problem (older ones can cause havoc, these need updating separately from the SW app).

@jaimedelapaz

@matts