Hi All,
Is it possible to have by which user device is put in maintenance mode. Can I show this on dashboard?
If you look at this post by mesverrum he has a good Dashboard Widget that shows Muted & Unmanaged Node using SWQL Query
Report on Muted and Unmanaged Entities
There are other variations on this as well including a Entities version that can potentially include Interfaces, Volumes, Applications etc.
What specifically do you mean by "Maintenance Nodes?" Do you mean, nodes that have alerts muted or those that are in an "Unmanaged" status? You can build reports for both of them.
For both. i want the report which have coloumns node name,alerts
muted/unmanaged, from and to dates, and by which user nodes are put into
maintainance mode.
All in the Meantime…
Applet View for Currently Unmanaged Nodes.
=======================================================================================
In this dashboard, i want to have the user name as well who changed the
maintainance status of device i.e from manage to unmanage,mute alerts or
created schedule maintenance.
On Mon, 8 Jul 2019, 5:32 pm dc4networks,
Like this?
This dashboard i already configured in my env. I need username also..which
user has put the devices in maintainance in this dashboard.
Ankitaja, No Worries...
It looks like David got you the answer that you were looking for.
I trust that "In The Meantime" helped thought.
Thanks David. I just missed your above reply. I will check with this query and update
Hi,
I am using below queries :-\
FIRST BOX
SELECT [N].Caption as [Element] , [N].DetailsURL as [_LinkFor_Element] , '/Orion/images/StatusIcons/Small-' + [N].StatusIcon AS [_IconFor_Element] -- , [N].IP_Address as [IP] -- , [N].DetailsURL as [_LinkFor_IP] , [Alerts].SuppressFrom as [Mute From] , [Alerts].SuppressUntil as [Mute Until]FROM Orion.AlertSuppression AS [Alerts]JOIN Orion.Nodes AS [N] ON [N].Uri = [Alerts].EntityURI
UNION
( SELECT [I].FullName as [Element] , [I].DetailsURL as [_LinkFor_Element] , '/Orion/images/StatusIcons/Small-' + [I].StatusIcon AS [_IconFor_Element] -- , [I].IP_Address as [IP] -- , [I].DetailsURL as [_LinkFor_IP] , [Alerts].SuppressFrom as [Mute from] , [Alerts].SuppressUntil as [Mute Until]FROM Orion.AlertSuppression AS [Alerts]JOIN Orion.NPM.Interfaces AS [I] ON [I].Uri = [Alerts].EntityURI
)
SECOND BOX
WHERE [Element] LIKE '%${SEARCH_STRING}%'
WHERE [Element] LIKE '%${SEARCH_STRING}%')
What modification I need to do in this query to have account name also in Dashboard.
To get the account name, take a look at queries in the previously-mentioned post:
The important parts are these:
...CASEWHEN ae.accountID IS NULL THEN 'Audit Log Not Found'ELSE ae.AccountIDEND AS [Account]...JOIN ( SELECT ae.NetObjectID, ae.AccountID, ae.timeloggedutc FROM Orion.AuditingEvents ae WHERE ae.auditingactiontype.actiontype = 'Orion.NodeUnmanaged') ae ON ae.NetObjectID = n.NodeID and ae.timeloggedutc=mostrecent.recent...
There are additional references in the WHERE clause and in the next SELECT statement after the UNION ALL, but the point is that the account name you're looking for is in the AccountID property of the Orion.AuditingEvents entity. You can see more details about it here:
Orion.AuditingEvents | Orion SDK Schemas
Thanks.
I also wanted to know the SQL query to get the report for interfaces are in maintenance along with the account which created that maintenance.
Just scroll down through the same post there is a post by whomademesme detailing how they updated the script to include Interfaces
Re: Report on Muted and Unmanaged Entities