# Discovery

**Step 1. Task definition**

- Select the group where agents will be created. The group ID must be greater
  than `0`; `All` cannot be used.

**Step 2. Azure base**

- **Azure credentials:** selects an Azure credential from the Pandora FMS
  credential store.
- **Custom Resource Group:** limits discovery to one Resource Group when
  enabled. It is disabled by default.
- **Resource group:** exact Resource Group name. It is shown when
  **Custom Resource Group** is enabled and does not accept regular expressions.

**Step 3. Advanced options**

- **Storage account regexp:** optional regular expression applied locally to
  storage account names.
- **Create one agent per Storage Account:** enabled creates one agent per
  account; disabled sends all modules to **Target agent**.
- **Target agent:** agent used when per-account creation is disabled. The
  default value is `Azure Storage`.
- **Agent name prefix:** prefix used for per-account agents. The default value
  is `Azure Storage `.
- **Agent autodisable mode:** enabled creates agents with `agent_mode=2`;
  disabled uses `agent_mode=1`.
- **Agent interval:** interval assigned to generated agents. The default is
  5 minutes.
- **Enable entities file re-scan interval:** retains the account cache until the
  selected re-scan interval is reached.
- **Entities re-scan interval:** interval before rebuilding the cache. It is
  shown only when the previous token is enabled and defaults to 1 day.
- **Request timeout:** timeout for each Azure request. The default is
  30 seconds.
- **Azure management endpoint:** optional endpoint for sovereign or custom
  clouds. Empty uses `https://management.azure.com`.
- **Microsoft login endpoint:** optional endpoint for sovereign or custom
  clouds. Empty uses `https://login.microsoftonline.com`.

**Step 4. Metrics and module filters**

- **Storage account metrics:** enables general storage-account metrics.
- **Blob service metrics:** enables Blob service metrics.
- **File service metrics:** enables File service metrics.
- **File share metrics:** enables per-file-share metrics. It is shown only when
  **File service metrics** is enabled.
- **Queue service metrics:** enables Queue service metrics.
- **Table service metrics:** enables Table service metrics.
- **Advanced container metrics:** enables advanced container checks and
  metrics. It is disabled by default.
- **Container regexp:** regular expression applied only to containers. It is
  shown only when **Advanced container metrics** is enabled.
- **Modules allow regexp:** one regular expression per line. Only modules that
  match at least one expression are allowed.
- **Modules deny regexp:** one regular expression per line. Matching modules
  are excluded.