The default configuration setting is set to be not enabled. When you enable the New Network Device Discovered alert, you can now monitor and be notified of any new network devices including firewalls, routers, L3 and L2 switches, stacks, packet processors, controllers, and access points.
Note:
- The newly added device must be discovered as one of the mentioned device types. Under the pre-configured settings of this alert, it does not trigger for generic devices being discovered.
- The discovery of devices prior to the enablement of this feature will not create an alert.
- The alert can’t be used for auditing purposes, unless it’s used in conjunction with a PSA set up to receive it. If a device is deleted and falls out of Auvik, the alert history will also be removed.
- The alert will not notify of devices that are previously discovered in Auvik which have been offline and are brought back online.
- The alert can be customized to include devices that are not in the default configuration. In order to enable and customize this functionality, change the Which devices? field. Note: Setting up the alert for all devices may cause excessive,“noisy” alerting.
- The alert will not fire immediately when Auvik discovers a new device. Firstly, Auvik will look internally to see if the newly detected device needs to be consolidated with other IPs under the tenant. The alert will appear only after the internal consolidation is complete, which typically takes from five to ten minutes after discovery.
How to enable the New Network Device Discovered alert
- From you Auvik Dashboard, click Manage Alerts > Alerts from the side navigation bar.
- Click on the Alerts v2 Table.
- Search for New Network Device Discovered.
- The New Network Device Discovered alert will appear in the search list. Click the Checkbox beside Informational.
- Click Enable.
When Auvik discovers a device on a new IP, Auvik will process it and all new IPs to consolidate the IPs under the devices to which the IPs belong. After the internal process is complete, and if the device is one of the device types covered under the alert, Auvik will report and display the alert.
Recommended operational practices
To make new-device alerts easier to investigate:
- Maintain an inventory of approved network devices.
- Use consistent device names that identify the site, location, or function.
- Keep device types and other available metadata accurate.
- Review new discovery alerts promptly.
- Confirm whether the device is expected before adding it to the approved inventory.
- Review the device record after discovery to confirm its classification and monitoring status.
- Use separate network-access-control or endpoint-security processes when the goal is to identify every endpoint on a switch port.
Clearing the alert
The default No Clear Condition – Clear by Dismissing setting does not automatically clear the alert.
To close the alert, dismiss it manually or use an integration or ticketing workflow that manages the alert lifecycle.