There should be a place to show the 'Unmanaged' duration for a particular node that you have set to 'Unmanaged'. Perhaps add it to the
mouse-over information for that particular node?
That is a good idea. Also the ability to see when the node was unmanaged. I dont think you can see that at this time.
There is an "Unmanaged Devices" report shared elsewhere in the community that displays the maintenance period -- I know it is not the same as having the information stored on the Node information itself.
Yes! I have always wondered why this feature has not been present.
If you would like a temporary work around, I wrote the following SWQL queries and placed them on the applicable views. All you need to do is add the "Custom Query" resource to the view and copy the SWQL below. You will need to alter the SAM query where I am referencing a custom property you may not utilize or have named alike
Orion Summary Home - Displays all unmanaged nodes.
SELECT [SysName] AS Name, IP_Address AS IP, UnManageFrom AS From_UTC, UnManageUntil AS Until_UTC
FROM
Orion.Nodes
Where
UnManaged = 'True'
Order By UnmanageUntil
SAM - Application Summary - Displays all unmanaged nodes for our Application Operations department (Custom Property).
SELECT nod.SysName as Name, nod.IP_Address as IP, nod.UnManageFrom as UnManageFrom, nod.UnManageUntil as UnManageUntil
Orion.Nodes as nod JOIN
Orion.NodesCustomProperties as ncp on nod.NodeID = ncp.NodeID
UnManaged = 'True' AND ncp.department = 'Application Operations'
Node Details View - Displays the unmanaged times for current node.
SELECT [SysName] AS Name, UnManageFrom AS UnManageFromUTC, UnManageUntil AS UnManageUntilUTC
UnManaged = 'True' AND NodeID = ${NodeID}
Regards,
Michael
I've been strugging with this, as there is not quite enough information existing in Solarwinds to make this a simple query. For example, if a node goes into, then subsequently out of, unmanaged state, it wipes out the Unmanaged data from the previous unmanaged event. The Events table shows when nodes go into and out of unmanaged state, but they are as event entries, and it si difficult to correlate according to each node. And the Audit table shows who puts a node into unmanaged state, but only shows when it becomes remanaged when done so by someone - if it comes out of unmanaged state because of the time expiry, that event is not captured in the Audit table.
To be able to produce this data as it's own report would be perfect:
Node Name Unmanaged from Unmanaged by Re-manage time Re-managed by Current management state
Or a simpler view, but probably more complex query:
Node name Total Unmanaged time over last X timeframe
I think it is implemented with the NPM 10.6 Beta 2.
Has this been implemented? It would be a nice feature to have when unmanaging nodes for maintenance reasons etc. Of for those nodes you forgot you unmanaged earlier in the week for maintenance
I would love to see this. as msawyer did, I created a custom SWQL query that I added to the nodes view to see the start and end date for the unmanaged node:
SELECT Unmanaged, UnmanageFrom, UnManageUntil
FROM Orion.Nodes
Where NodeID=${NodeID} and Unmanaged=1
there is no way to extend an "unmanage" without going directly to DB?
Last time I have to wait the maintenance ended before extending one
THanks for sharing!
I found this thread by searching for information about "unmanaged duration" on Google.
Just an FYI update, I have been able to find exactly this information in the recent audit events for a node. It shows the name of the user who unmanaged the node and the duration the node will remain unmanaged.
Here's an example of the audit event I am looking at:
I've erased the user and node names to avoid any security issues.
Here it is:
Resource to display unmanaged information on the node page including user info
And to pile on to this great Idea...
Yes this needs to be an feature. I believe there are other feature requests similar to this one. To that point someone posted the following on Thwack, so I'm passing it on to you. I run 2 x's a week and it supplies a list of all muted node, unmanaged nodes and unmanaged interfaces. If you do this, it's one report with 3 different contents.
--------------------------------------------------------------------------------------------------------
SuppressedAlerts
SELECT DISTINCT [EntityUri],
[SuppressFrom] AS [UtcSuppressFrom],
[SuppressUntil] AS [UtcSuppressUntil],
ToLocal([SuppressFrom]) AS [LocalSuppressFrom],
ToLocal([SuppressUntil]) AS [LocalSuppressUntil],
CASE
WHEN [EntityUri] LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%' AND [EntityUri] NOT LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%/%'
THEN [N].[Caption]
WHEN [EntityUri] LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%/Interfaces/InterfaceID=%'
THEN [I].[FullName]
WHEN [EntityUri] LIKE 'swis://%/Orion/Orion.Nodes/NodeID=%/Applications/ApplicationID=%'
THEN [AA].[FullyQualifiedName]
ELSE 'SomethingElse'
END AS [Element],
THEN [N].[DetailsUrl]
THEN [I].[DetailsUrl]
THEN [AA].[DetailsUrl]
ELSE '<a href="'">thwack.solarwinds.com/.../a>'
END AS [DetailsUrl],
THEN [N].[Status]
THEN [I].[Status]
THEN [AA].[Status]
ELSE 30
END AS [Status],
[AE].AccountID
FROM Orion.AlertSuppression AS [AlertSup]
LEFT OUTER JOIN Orion.Nodes AS [N]
ON [AlertSup].[EntityUri] = [N].[Uri]
LEFT OUTER JOIN Orion.NPM.Interfaces AS [I]
ON [AlertSup].[EntityUri] = [I].[Uri]
LEFT OUTER JOIN Orion.APM.Application AS [AA]
ON [AlertSup].[EntityUri] = [AA].[Uri]
LEFT OUTER JOIN Orion.AuditingEvents AS [AE]
ON [AE].AuditEventMessage LIKE CONCAT('%', CASE
THEN [N].[NodeName]
THEN [I].[InterfaceCaption]
THEN [AA].[Name]
ELSE 'Wrong'
END, '%') AND [EntityUri] LIKE CONCAT('%=', [AE].NetObjectID)
INNER JOIN Orion.AuditingActionTypes AS [AT]
ON [AE].ActionTypeID = [AT].ActionTypeID
WHERE [AT].ActionTypeDisplayName LIKE '%mute%'
Unmanaged_Nodes
SELECT * FROM [dbo].[NodesData]
WHERE UnManaged='true'
Unmanaged_Interfaces
SELECT * FROM [dbo].[Interfaces]
WHERE UnManaged='true' AND AlarmNotification_IfAlias='true'
