Where can I find the Audit data for Real Time Notifications. It seems that Cirrus.RTN and NCM.RTNAudit are no longer containing that information.
The SQL table is: NCM_Audit
SELECT TOP 1000 * FROM [dbo].[NCM_Audit] where ModuleName = 'RTN' order by DateTime desc
or the following is a larger set of the processes.
SELECT TOP 1000 * FROM [dbo].[NCM_Audit] where UserName = 'Real-Time Config Change Detection' order by DateTime desc
SWQL:
SELECT ID, UserName, ModuleName, Type, Action, Details, DateTime, ApprovedBy, RequestID, RequestLink
FROM Cirrus.Audit
where ModuleName = 'RTN'
or:
SELECT top 5 ID, UserName, ModuleName, Type, Action, Details, DateTime, ApprovedBy, RequestID, RequestLink
where UserName = 'Real-Time Config Change Detection'
I am not sure how to tie this message back to a node.