Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Download configuration from nodes that fail compliance report

Hello,

Currently due to a bad script we have a bunch of nodes with a bad line in the config. We have created a policy that checks the ~2800 nodes with a rule looking for the bad string. When we run the report it displays the total ~2800 nodes with an X displaying which ones fail the compliance because of the string defined in the rule. We started spot checking some of them and some have already had the config string corrected but a new config was never downloaded into NCM. I know I can create a Remediation script to resolve this line in the config however I would like to download a current config for all the affected nodes and then re-run the report in order to have the remediation script only run on nodes that are still being affected. How can I quickly download a new config for the nodes that are affected based on the compliance report? Also how to re-download the config after the remediation script has run?

Thank you for any help that can be provided.

Find more posts tagged with

Accepted answers

All comments

christopher.a.thornton

For your compliance report how are you selecting the nodes to run it against? Is it a dynamic selection based off of some criteria such as a custom property or are you running it against all nodes in your instance? You can use that same filter to select the nodes in the Configuration Management tab to download a fresh copy of the running config as well. I am not sure of a way to have the Compliance Check pull the config automatically right now, but if you manually download it then you can update the report after the configs are downloaded. If the devices are setup to be backed up by NCM every night then you may just have to tweak your Policy to make sure you are running the report against the most recent type of config backup that you are downloaded (could be running or startup depending on your setup).

g4m3r7ag

We are selecting nodes by a Vendor category. I am unsure if I'll get authorization to download a config for all ~2800 nodes is why I was hoping to just do the affected ones. These also are not on a scheduled backup. Only our core equipment has scheduled downloads these are all CPE devices.

christopher.a.thornton

I am not sure if there is a way to dynamically download configs in NCM via a compliance check failure, though there may be. You could create a new custom property and you set to true or false to track the failures, though that would be a lot of manual intervention for you. Maybe someone else on here may know of a way to dynamically download the configs on just the failing nodes.

g4m3r7ag

Well I got authorization to run a job to download all configs for these devices tomorrow evening so hopefully I'll be able to start making changes Thursday. Thank you for all the help. Time to start learning some Regex.