Can I include the same asset in multiple scan schedules?

Yes, the same asset can be included in multiple scan schedules and windows. If the schedules do not overlap, the asset will be scanned each time the scans run. However, if the scan schedules that include the same asset overlap, the asset will only be scanned once within a consolidated scan window.

For example, suppose you have a daily scan schedule including the asset that runs on Monday and Friday mornings, and another daily scan schedule including the asset that runs on Wednesday and Saturday nights. In this scenario, the scan schedules will never overlap; therefore, the asset will be scanned on Monday, Wednesday, Friday, and Saturday.

Alternately, suppose you have a daily scan schedule including the asset that runs once a day in a scan window starting at 11pm and ending on Saturday at 7am; and another weekly scan schedule including the asset that runs on Saturdays from 3am to 11am. In this scenario, the scan schedules overlap on Saturday, so the asset will only be scanned once on Saturday during the overlapping scan window from 12am - 11am. 

Note: This article refers to scan scheduling functionality available in the Alert Logic Managed Detection & Response platform. For detailed instructions on managing scan schedules within this platform, refer to our Manage Scan Schedules documentation.