IPAM Alert for subnet add/delete

Question

We are implementing a NAC solution and one of the things we need is a way to know when a subnet is added or deleted so that we can keep the NAC updated on networks. This will also help keep our security scanner updated with the applicable networks. I saw this question asked back in 2016 and it never got any answer.

If there a built in report, or one that can be modified to alert for these changes?

Thanks for any help ahead of time.

Derek

earlchrys · Answer

This feature is not yet added on IPAM.

Please vote on the below Feature Request about it.

https://thwack.solarwinds.com/t5/IPAM-Feature-Requests/Alerting-for-subnet-addition-or-removal/idi-p/604350

reccenav · Answer

Thanks. I will give it a try this week and see what happens. I have never played with information from the DB so this will be new. My previous installs the companies all had DBA's who did this type of work.

Derek

frak · Answer

From subnet creation,  You can setup an alert on this event:  IPAM Networks -> IPAM Networks was created

There is no event for the deletion of an IPAM Network.

However all IPAM audit events appear in IPAM_Events table, such that if you want to find subnet removals, a query like this will do it:

SELECT EventTime, UserName, Message
FROM IPAM_Events
where message like '%has been removed'