Blog Summary

  • ServiceNow Discovery is an ITOM application that automatically finds your IT infrastructure and saves each item as a configuration item (CI) in the CMDB.
  • Discovery goes through phases for every target: scanning, classification, identification, and exploration.
  • It gives you better visibility and more accurate data, reduces manual work, and supports cloud environments.

Organizations manage physical servers, virtual machines, cloud resources, containers, applications, and network devices across different environments. ServiceNow Discovery is an IT Operations Management (ITOM) application that automatically identifies infrastructure components across your network and stores their details in the Configuration Management Database (CMDB). 

Each item it finds is saved as a configuration item (CI), along with its attributes and its relationships to other CIs. Manually tracking these components is difficult, so automation helps prevent operational blind spots. 

This guide helps you understand Discovery step by step and build a strong foundation. Whether you’re a beginner or an IT professional looking to improve infrastructure visibility, this guide covers the fundamentals.

What is ServiceNow Discovery?

ServiceNow Discovery is a tool that automatically finds and keeps track of an organization’s IT devices and systems. These include servers, computers, applications, and cloud resources.

Imagine a company has 200 servers, multiple devices and applications. The IT team needs to know which devices exist, what software they use, and how they are connected. Doing it all manually is tedious. This is where ServiceNow Discovery helps. It automatically finds devices, collects their information, and stores it in a central database called the Configuration Management Database (CMDB).

Key terms at a glance

Terms Meaning
CMDB (Configuration Management Database) The central register that stores information about IT devices, applications, and their connections.
CI (Configuration Item) In the CMDB, such as a server, a router or an application.
MID Server (Management, Instrumentation, and Discovery Server) It is a small program inside your network that does the scanning for ServiceNow.
IRE (Identification and Reconciliation Engine) Identification and Reconciliation Engine identifies existing CIs, helps prevent duplicates, and manages data updates.
Agentless Works without installing software on each device being scanned.

What are the ServiceNow Discovery methods?

ServiceNow supports two main types of Discovery: horizontal discovery and top-down Discovery (Service Mapping). These methods serve different purposes in identifying IT infrastructure and mapping application services. 

Horizontal Discovery

Horizontal Discovery scans a network to identify devices, servers, applications, and other infrastructure components. It creates or updates their configuration item (CI) records in the CMDB.

Example: Finding Windows servers, Linux machines, routers, and databases across a network 

Top-down Discovery (Service Mapping)

Top-down discovery (handled via ServiceNow Service Mapping) traces the end-to-end flow of a specific business service rather than just looking at isolated devices. It starts from the entry point and traces the underlying components and dependencies that support it.

Example: Mapping a website to its web server, application server, and database. 

In practice, these approaches complement each other: identifying infrastructure provides the foundation for understanding service dependencies. Let’s see how ServiceNow actually converts information into CMDB records.

How Discovery Works in ServiceNow?

Discovery moves sequentially through four main phases for every target. Understanding these four phases is one of the most important parts of learning ServiceNow discovery fundamentals.

how discovery works in ServiceNow

1. Scanning

Discovery begins by checking configured target IP addresses and probing for responsive devices and open ports. A MID Server typically executes these operations for traditional network-based discovery.

Example: Discovery finds a device responding on an IP address within the configured range.

2. Classification

Discovery determines what type of device it found. Based on the responses and available access, it may identify a Windows server, Linux machine, router, or another supported device.

Example: The device is identified as a Linux server based on the information Discovery collects.

3. Identification

Discovery determines whether the device matches an existing CI or represents a new item. Identification rules and the Identification and Reconciliation Engine (IRE) help make this decision.

Example: ServiceNow matches the server to an existing CMDB record instead of creating a duplicate.

4. Exploration

Discovery gathers additional details about the identified device, such as hardware configuration, operating system information, running processes, and supported application relationships.

Example: ServiceNow collects the server’s operating system version, memory details, and information about supported applications.

Each phase has a specific role in finding infrastructure and collecting the information needed to update the CMDB. Together, these phases turn basic device visibility into useful configuration data, giving IT teams a stronger foundation for infrastructure management and troubleshooting.

Key Features in ServiceNow 

ServiceNow Discovery is built to give you visibility without a lot of manual effort. The approach depends on the environment, the information you need, and the supported discovery method. Here are some key features:

Automated infrastructure discovery

Automatically identifies supported servers, hardware, applications, cloud resources, and containers without installing agents on every target.

Event-driven discovery

It captures supported cloud configuration changes as they happen and keeps infrastructure information up to date between scheduled scans.

Client-based visibility

It uses ServiceNow Agent Client Collector (ACC) to collect configuration data from supported endpoints that are difficult to reach through traditional agentless discovery.

ITOM Content Service

It provides discovery content, including application fingerprints and patterns. It also helps identify and classify supported technologies.

Together, these features help ServiceNow discover infrastructure, collect information, and maintain better visibility. 

How does discovery update a CMDB?

CMDB Discovery in ServiceNow helps organizations identify infrastructure components and maintain their configuration records and relationships. Discovery finds the data, the CMDB stores it, and the Identification and Reconciliation Engine (IRE) ensures the data is clean. Here is the journey of one discovered device:

  1. The MID Server collects information from the device.
  2. The results are sent to your ServiceNow instance.
  3. The IRE decides whether this is a new CI or an update to an existing one.
  4. The CMDB record is created or updated, along with its relationships.

The IRE works with two kinds of rules:

  • Identification rules decide whether a discovered item matches a CI that already exists, so you don’t end up with duplicates.
  • Reconciliation rules decide which data source wins when more than one source provides the same detail.

For example, without Discovery, an IT team might need to record five new servers manually.  With Discovery, ServiceNow can detect servers, collect configuration details, and create or update matching CI records.

ServiceNow Discovery Setup: Prerequisites and Configuration 

Setup requires the appropriate permissions, target infrastructure, credentials, and discovery schedules. It requires more than just enabling a feature. Follow these steps to set up:

Configuration setup in servicenow discovery

Step 1: Prepare Your ServiceNow Instance

Make sure Discovery is activated (it is a separate subscription) and that you have the discovery_admin role.

Step 2: Configure the MID Server

Install it on a machine that can reach both ServiceNow and your devices, then validate it until its status shows Up.

Step 3: Configure Credentials

Give Discovery read-only logins for your devices, such as SSH for Linux, WMI for Windows and SNMP for network devices.

Step 4: Define Targets

Add the IP ranges to scan (only ones you control), or set up your cloud account for cloud discovery.

Step 5: Create a Discovery Schedule

Choose what to scan, when to run, and which MID Server to use. As a beginner, start with one network segment and run it manually.

Step 6: Validate the Results

Review Discovery Status, the Discovery Log, and the Devices tab, then open a few CMDB records to confirm they look right.

What are the benefits of discovery in ServiceNow?

ServiceNow Discovery helps organizations improve infrastructure visibility, maintain better configuration data, and reduce the manual work involved in tracking IT resources.

  • Gain visibility: It tracks servers, applications, cloud resources, and devices in one place. 
  • Improve data accuracy: Discovery updates records automatically, reducing manual error and improving data quality. 
  • Cloud support: Discover supported resources across cloud platforms like AWS, Azure, and Google Cloud. 
  • Lower cost: It reduces the need for custom integrations and separate tools. 
ServiceNow-discovery-cta

Conclusion

Discovery in ServiceNow helps organizations maintain accurate infrastructure records without relying on manual tracking. It improves visibility across servers, applications, cloud resources, and network devices. It also helps IT teams maintain reliable CMDB data and understand infrastructure relationships.

For beginners, understanding the four Discovery phases scanning, classification, identification, and exploration is a strong starting point. Learning how the MID Server, Discovery patterns, and Identification and Reconciliation Engine (IRE) work together will help you understand how infrastructure data reaches the CMDB.

If you want to skill up and see how infrastructure data enters the CMDB, set up a ServiceNow practice instance, review Discovery configurations, and run your first discovery. Build your practical skills, solidify your ITOM principles, and move confidently toward a ServiceNow career.

Frequently Asked Questions

What are the two types of discovery supported by ServiceNow?

ServiceNow uses two main types of discovery to track your IT environment: Horizontal Discovery and Top-down Discovery (also called Service Mapping).

What is the role of IRE in ServiceNow Discovery?

The Identification and Reconciliation Engine (IRE) identifies matching configuration items and helps prevent duplicate records.

Does ServiceNow Discovery require agents?

Traditional ServiceNow Discovery is agentless, but the Agent Client Collector (ACC) can provide additional visibility for supported endpoints.

What is a MID Server?

A MID Server is a small program installed inside your network. It talks to your ServiceNow instance and does the actual scanning of your devices.

Latest Salesforce Insights