# Discovery

**Step 1. Task definition**

- Select the group where agents will be created. The group ID must be greater
  than `0`; `All` cannot be used.

**Step 2. Azure base**

- **Azure credentials:** selects an Azure credential from the Pandora FMS
  credential store.
- **Custom Resource Group:** limits discovery to one Resource Group when
  enabled. It is disabled by default.
- **Resource group:** exact Resource Group name. It is shown when
  **Custom Resource Group** is enabled and does not accept regular expressions.

**Step 3. Advanced options**

- **Storage account names**: allows you to specify one or more complete Storage Account names separated by `;`. Matching is exact and case-insensitive. If left empty, all accounts are discovered.
- **Create one agent per Storage Account:** enabled creates one agent per
  account; disabled sends all modules to **Target agent**.
- **Target agent:** agent used when per-account creation is disabled. The
  default value is `Azure Storage`.
- **Agent name prefix:** prefix used for per-account agents. The default value
  is `Azure Storage `.
- **Agent autodisable mode:** enabled creates agents with `agent_mode=2`;
  disabled uses `agent_mode=1`.
- **Agent interval:** interval assigned to generated agents. The default is
  5 minutes.
- **Enable entities file re-scan interval:** retains the account cache until the
  selected re-scan interval is reached.
- **Entities re-scan interval:** interval before rebuilding the cache. It is
  shown only when the previous token is enabled and defaults to 1 day.
- **Request timeout:** timeout for each Azure request. The default is
  30 seconds.
- **Azure management endpoint:** optional endpoint for sovereign or custom
  clouds. Empty uses `https://management.azure.com`.
- **Microsoft login endpoint:** optional endpoint for sovereign or custom
  clouds. Empty uses `https://login.microsoftonline.com`.

**Step 4. Metrics and module filters**

- **Storage account metrics:** enables general storage-account metrics.
- **Blob service metrics:** enables Blob service metrics.
- **File service metrics:** enables File service metrics.
- **File share metrics:** enables per-file-share metrics. It is shown only when
  **File service metrics** is enabled.
- **Queue service metrics:** enables Queue service metrics.
- **Table service metrics:** enables Table service metrics.
- **Advanced container metrics**: checks whether the `ContainerLevelCapacityMetrics` rule is enabled in Azure and generates individual used capacity and blob count modules for each container. It also generates the capacity percentage when **Blob service metrics** is enabled. It does not create additional agents and is disabled by default.
- **Container regexp**: optional regular expression applied only to container names retrieved through **Advanced container metrics**. If left empty, all containers are monitored. It does not affect general Blob service metrics or the `Container Count` module.
- **Modules allow regexp:** one regular expression per line. Only modules that
  match at least one expression are allowed.
- **Modules deny regexp:** one regular expression per line. Matching modules
  are excluded.