Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

When did an interface/port last see traffic?

I have both NPM and UDT but I'm not sure which, if either, app can do the following. I want to build a report that can tell me the last time an interface or port saw any traffic. My ultimate goal is to use Orion to identify ports that should be placed in admin down status if they have been inactive for say, 30 days.

Has anyone done this? I would greatly appreciate any help. Thanks.

Find more posts tagged with

Accepted answers

rschroeder

I built a process for accomplishing this very thing, for the purpose of being able to re-use switchports that have not seen traffic in a LONG time. Check out my shared info here:

How to create a report displaying the Last Time Data was Transmitted or Received on a Switch Port

All comments

mrxinu

Hi there, this SWQL query will give you a list of all interfaces whose last record of passing traffic was >30 days ago:

SELECT    n.Caption AS NodeName    ,i.Caption AS InterfaceName    ,MAX(it.DateTime) AS MostRecentDateTimeFROM Orion.Nodes nJOIN Orion.NPM.Interfaces i ON n.NodeID = i.NodeIDJOIN Orion.NPM.InterfaceTraffic it ON i.InterfaceID = it.InterfaceIDWHERE it.PercentUtil > 0AND HOURDIFF(it.[DateTime], GETDATE()) > 30GROUP BY n.Caption, i.Caption

rschroeder

I built a process for accomplishing this very thing, for the purpose of being able to re-use switchports that have not seen traffic in a LONG time. Check out my shared info here:

How to create a report displaying the Last Time Data was Transmitted or Received on a Switch Port

borgan

Thank you. This works very well and gave me another related idea. If one wanted an easy way to "flag" these interfaces for deletion, this query could be included as a Custom SWQL query for the Trigger. The resulting action could be to change the value of a Yes/No custom property to Yes, which would make it easy to run a report showing all interfaces with the True flag.