One Trick I've Learned - Malcolm with Netbox

[trwagner1]

When setting up Malcolm with Netbox, I learned a trick.

When allowing Zeek to create data within Netbox, don't try to create multiple sites. Otherwise, your data will get duplicated. If you create a new site and move a device into that site, it will get recreated in the "default" site as soon as it is again discovered.

Allow Zeek to auto-populate Netbox with data for a good period of time, say 48 hours or a week depending on what your span port is observing. Then, open the terminal as your "service account", run the Malcolm/scripts/configure script and go through the prompts until you get to the section for Netbox. Then, indicate you do not want Zeek to update Netbox when you get to this point. After the script is finished, then restart Malcolm.

Now you can go into Netbox and create sites and assign devices to sites without duplication of data.