Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Finding unmanage reason

Orion 2026.1 now features a dialog to provide a reason when unmanaging nodes:

After a little exploration, I created this SWQL for use in a widget that shows when nodes were unmanaged with the name, IP address, and reason given.

SELECT n.Caption, n.IP_Address, n.UnManaged, n.UnManageFrom, av.ArgsValue
FROM Orion.Nodes n
LEFT OUTER JOIN (SELECT a.ArgsValue, e.NetworkNode
FROM Orion.AuditingEvents e
INNER JOIN Orion.AuditingArguments a ON a.AuditEventID = e.AuditEventID
WHERE a.ArgsKey = 'Reason') as av ON n.NodeID = av.NetworkNode
WHERE n.UnManaged = 1

Find more posts tagged with

moderndashborads

prodfr

sqwl

npm

Unmanage

Comments

cnorborg

Nice! I did a minor improvement on it to remove one of the joins through the use of a "Navigation Property", or what I like to call an implicit join, which you can see by the chain icon in SWQL Studio. the AuditingArguments table is easily referenced by using the "Arguments" navigation property. Faster, more efficient, plus makes things easier to follow usually… Other than that this query should be identical to yours, at least it gave me the same output on my environment.

SELECT n.Caption, n.IP_Address, n.UnManaged, n.UnManageFrom, av.ArgsValue
FROM Orion.Nodes n
LEFT OUTER JOIN (SELECT e.Arguments.ArgsValue, e.NetworkNode
FROM Orion.AuditingEvents e
WHERE e.Arguments.ArgsKey = 'Reason') as av ON n.NodeID = av.NetworkNode
WHERE n.UnManaged = 1

Quick Links

Cisco ASR Devices
Cisco ASR Devices.pollerCisco ASR Devices
Basic SWQL Syntax
SWQL is built on the framework of SQL and as such supports most of the standard clauses as part of a query. A very simple example query is: SELECT Caption, IPAddress, Vendor, ResponseTime FROM Orion.Nodes Dissecting this query is relatively straightforward: show some fields (Caption, IP address, Vendor, and Response Time)…
Cisco ASA SSL Tunnels
Active SSL Tunnels-ASA.UnDPThis poller *should* display the number of Active SSL VPN (Anyconnect) Tunnels currently connected to your box. However, I tried it with my 5520 running 8.0.4 and for some reason I get a OID Not Supported. Here's my post in the forum: *EDIT* This is confirmed working with at least Interm release…
HP ProCurve Switches Hardening check
HP ProCurve Switches Hardening check.xmlGeneral hardening for HP switches