The inventory filter had no NETDISCO option, so neither the list nor the CSV export (which honours the same filter) could be narrowed to the switch estate. The filter keys on the netdisco_device_ip pin rather than the creation-time source enum — same rule as vCenter and IGEL — otherwise every switch Wazuh or Nessus registered first drops out. The MANUAL branch now excludes them too: without a scanner linkage of its own, a Netdisco switch was answering as "genuinely manual". Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014bJSiCMEPYQYdi6emTDRj2