Options
Sign in to Download

Alert on Unmanaged Node for more than 30 days

I have developed an Alert to trigger on Nodes which are unmanaged for more than 30 days.

It's a Custom Query Alert which is written based on Audit Events as unmanaged objects can't trigger an alert unless we update/check the box under Polling Settings to trigger actions on unmanaged objects.

This alert will work even without enabling trigger action on unmanaged objects under polling settings.

Trigger Condition : 

KashifMohammad 

  • SELECT AuditingEvents.Uri, AuditingEvents.DisplayName FROM Orion.AuditingEvents AS AuditingEvents

RIGHT join(select ae.NetObjectID, max(ae.AuditEventID) as [AuditEventID]
    from Orion.AuditingEvents ae
    where ae.ActionTypeID = 28
    group by ae.NetObjectID) x on AuditingEvents.AuditEventID = x.AuditEventID
left join orion.nodes as n on AuditingEvents.NetworkNode=n.NodeID
----left JOIN Orion.AlertSuppression as s on n.Uri=s.EntityUri


---where s.SuppressFrom<=GETUTCDATE()-30 and  AuditingEvents.ActionTypeID like '93' 

where n.Status like '9' and AuditingEvents.ActionTypeID like '28' and n.UnManageFrom<=GETUTCDATE()-30

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 200,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.

SolarWinds Customer Success Center Certification SolarWinds Lab Link Accounts
About THWACK Blogs Federal & Government Edit Settings Free Tools & Trials
Legal Documents Terms of Use Privacy California Privacy Rights Security Information
©2021 SolarWinds Worldwide, LLC. All Rights Reserved.