Automate unmanage/mute alerts from managed node perspective during patching with 3rd party tools

We currently use Ivanti Security Controls to push patches to our Windows servers. It has an option to push scripts or executables down to the hosts being patched and I'd like to find some way to script out the entering and exiting of maintenance mode as well as muting alerts within Solarwinds during these patching tasks.

I understand Orion has an unmanage utility that can build cmd files with correlating XML files to be used with Task Scheduler but it seems since it relies on the executables and DLLs on the Orion server itself, thus the task has to run from the Orion server, which does not work for me. I don't need to automate this at scheduled times, I need to trigger it during a patch run and from the manage node itself, ideally.

I've seen articles regarding powershell scripts that can be used from the managed node perspective, but it requires the Solarwinds SDK to be deployed, which is not something I want to install on 500+ servers.

Both of those articles seem to be several years old so I'm hoping Solarwinds has developed a better option since then. Anyone have any ideas?

Find more posts tagged with

Accepted answers

All comments

mesverrum

The solarwinds powershell module is really just a wrapper around some rest calls, if you wanted to avoid using the module you can just write up the rest calls directly. I find that the perl examples are probably best for seeing how to set up calls without any supporting software https://github.com/solarwinds/OrionSDK/blob/master/Samples/Perl/query.pl

sturdyerde

Let me know how this goes. We're currently considering a move to ISeC from Ivanti's older [shudder] EMSS product. I have managed to "sync" our servers' patch group assignments (and GUID) from EMSS to custom properties in Orion, but haven't had time to automate the full flow. I can only hope/expect that ISeC's API and custom action features are better the EMSS.

Part of my related work is on GitHub, but the flow described above has not been uploaded yet.

Get custom patch groups from EMSS API:
https://github.com/SturdyErde/HEAT-EMSS-API

Calculate Patch Tuesday and the subsequent patch weekends (we have 4 weekly patch groups):
https://github.com/SturdyErde/Get-PatchTuesday

I'll try to get the other bit uploaded and linked in case it might inspire next steps.