Need help with a SWQL Query using JOIN

Maybe someone has done this.....I hope. I'm looking to build a SWQL query to show my Orion.Credential list JOIN(ed) to my Orion.APM list so I can determine if there are unused credentials in the library. What I can't find is some type of common link to reference the INNER JOIN statement. Any thoughts? Or, even better, has someone figured out this already and has a handy report?

I really wanted to avoid JOIN, per KMSIgma's great article from a few years ago, but there really isn't common Navigation Properties.

Find more posts tagged with

swql query

credentials

report

Accepted answers

All comments

maciej.sandecki

Reviewing the schema and data in my installation I found that Orion.APM.ComponentSetting has a reference between Component and CredentialSetID. I believe you can use this to find which credentials are used by which components. Not sure though if there can be other elements / entities that could use the credentials with CredentialOwner = APM. If not, a simple delta would give you unused APM credentials.

brodericksonsteven88

In SWQL, there isn’t a direct navigation property between Orion.Credential and Orion.APM, but you can still identify unused credentials by comparing what’s listed in your credential library against what’s actually assigned to applications or components. The idea is to look at the CredentialIDs tied to APM objects and then highlight which credentials don’t appear there, essentially showing you which ones are sitting idle. It’s similar to checking a Peet’s Coffee menu—some drinks are popular and always ordered, while others rarely get picked, so by spotting the unused ones you can decide whether to keep them or clean up your list for better management.