Query for recently added nodes?

Good day.

I've inherited a new Solarwinds installation. We have a data tile for 'newly added nodes' that does not work as expected.

Can someone in the community please advise a good query to pull count of nodes added to the topology for the last 30 days? I found something like that on Thwack but the entry is 10 years old. Please post latest good query to pull nodes added.

Thank you!

Find more posts tagged with

nodes

addeddeleted

Accepted answers

bobmarley

SELECT TOP 1000 AuditEventID, ToLocal (TimeLoggedUtc) as LocalTime, AccountID, AuditEventMessage
FROM Orion.AuditingEvents

Where AuditEventMessage LIKE '%created node%'
Order BY TimeLoggedUTC desc

brscott

Here's the query I use on a widget to see new nodes added. It uses Orion.AuditingEvents like Bob suggests.

SELECT 
    ToLocal(ae.ObservationTimestamp) as CreatedDate, 
    n.Caption as Node,
    '/Orion/images/StatusIcons/Small-' + n.StatusLED as _IconFor_Node, 
    n.DetailsUrl as _LinkFor_Node, 
    n.Engine.DisplayName as PollingEngine,
    n.ObjectSubType,
    (SELECT count(VolumeID) as Volumes FROM Orion.Volumes v where v.nodeid=n.NodeID) as Volumes,
    (SELECT count(InterfaceID) as Interfaces FROM Orion.NPM.Interfaces i where i.nodeid=n.nodeid) as Interfaces
FROM Orion.AuditingEvents ae
Left join Orion.Nodes n on ae.netobjectid=N.NodeID 
Where ae.netobjecttype='N' and ae.ActionTypeID=25 and n.nodeid is not null
Order by CreatedDate desc

All comments

bobmarley

Try this, otherwise the events are in the AuditEvent table and you can filter them from there in a report.

bobmarley

SELECT TOP 1000 AuditEventID, ToLocal (TimeLoggedUtc) as LocalTime, AccountID, AuditEventMessage
FROM Orion.AuditingEvents

Where AuditEventMessage LIKE '%created node%'
Order BY TimeLoggedUTC desc

brscott

Here's the query I use on a widget to see new nodes added. It uses Orion.AuditingEvents like Bob suggests.

SELECT 
    ToLocal(ae.ObservationTimestamp) as CreatedDate, 
    n.Caption as Node,
    '/Orion/images/StatusIcons/Small-' + n.StatusLED as _IconFor_Node, 
    n.DetailsUrl as _LinkFor_Node, 
    n.Engine.DisplayName as PollingEngine,
    n.ObjectSubType,
    (SELECT count(VolumeID) as Volumes FROM Orion.Volumes v where v.nodeid=n.NodeID) as Volumes,
    (SELECT count(InterfaceID) as Interfaces FROM Orion.NPM.Interfaces i where i.nodeid=n.nodeid) as Interfaces
FROM Orion.AuditingEvents ae
Left join Orion.Nodes n on ae.netobjectid=N.NodeID 
Where ae.netobjecttype='N' and ae.ActionTypeID=25 and n.nodeid is not null
Order by CreatedDate desc